CVE-2024-45431: Blue Sdk: hatalı girdi doğrulama

Açıklama (NVD)

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID.

Özet bilgiler

Ürün

Opensynergy Blue Sdk

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%5,63 (yüzdelik 93)

CWE

CWE-20

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• pcacybersecurity.com
• www.opensynergy.com
• CWE-20