PT-2024-7671 · Cypress · Cypress Bluetooth Sdk

Published 2024-10-08 · Updated 2024-11-04 · CVE-2024-48289

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cypress Bluetooth SDK version 3.66

Description The issue is related to a buffer overflow in the memory when handling the data header length field of the LL Pause Enc Req, which is part of the Bluetooth Low Energy (BLE) technology. This can be exploited by a remote attacker to cause a Denial of Service (DoS) by sending specially crafted packets, such as a crafted LL PAUSE ENC REQ packet.

Recommendations For Cypress Bluetooth SDK version 3.66, consider disabling the handling of LL Pause Enc Req packets until a patch is available to prevent potential Denial of Service (DoS) attacks. Restrict access to the Bluetooth Low Energy implementation to minimize the risk of exploitation. Avoid using the LL PAUSE ENC REQ packet in the affected API endpoint until the issue is resolved.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09117

CVE-2024-48289

Affected Products

Cypress Bluetooth Sdk

References · 6

• https://bdu.fstec.ru/vul/2024-09117 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-48289 · Security Note
• https://t.me/cvedetector/9585 · Telegram Post
• https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf · Note
• https://twitter.com/CVEnew/status/1852362949173837943 · Twitter Post
• https://community.infineon.com/t5/PSoC-4/BLE-SDK-Integer-Overflow/m-p/888037#M49108 · Note