FKIE_CVE-2021-31612

Vulnerability from fkie_nvd - Published: 2021-09-07 07:15 - Updated: 2024-11-21 06:06
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet.
References
cve@mitre.orghttp://www.zh-jieli.com/product/68-cn.htmlProduct, Vendor Advisory
cve@mitre.orghttps://dl.packetstormsecurity.net/papers/general/braktooth.pdfBroken Link
cve@mitre.orghttps://launchstudio.bluetooth.com/ListingDetails/19746Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.zh-jieli.com/product/68-cn.htmlProduct, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://dl.packetstormsecurity.net/papers/general/braktooth.pdfBroken Link
af854a3a-2127-422b-91ae-364da2661108https://launchstudio.bluetooth.com/ListingDetails/19746Third Party Advisory
Impacted products
Vendor Product Version
zh-jieli ac6901_firmware -
zh-jieli ac6901 -
zh-jieli ac690n_firmware -
zh-jieli ac690n -
zh-jieli ac692n_firmware -
zh-jieli ac692n -
zh-jieli ac6902_firmware -
zh-jieli ac6902 -
zh-jieli ac6903_firmware -
zh-jieli ac6903 -
zh-jieli ac6905_firmware -
zh-jieli ac6905 -
zh-jieli ac6904_firmware -
zh-jieli ac6904 -
zh-jieli ac6907_firmware -
zh-jieli ac6907 -
zh-jieli ac6908_firmware -
zh-jieli ac6908 -
zh-jieli ac6997_firmware -
zh-jieli ac6997 -
zh-jieli ac6998_firmware -
zh-jieli ac6998 -
zh-jieli ac6999_firmware -
zh-jieli ac6999 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6901_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A68BB39A-4A9C-4B57-9D29-12601FCFC763",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6901:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06EBB244-F958-45C8-84B5-DFB3BA3E9449",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac690n_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "78A24F18-DFE9-44B7-990A-D15F7440DB91",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac690n:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "737F0352-0A9E-4242-B595-78C47C6655D7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac692n_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00D94121-902F-4C9A-8BE8-D7B1A9910955",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac692n:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "20A1E4AC-5F0C-4FBD-99ED-1EE81AC44A67",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6902_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DA40F06-EAA2-4DD5-B223-F8A024611B93",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6902:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EED7E82-F385-4BF4-92C3-F1D87D4B27A0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6903_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA6F3C19-43E8-4917-B8D2-FE7D9DB06DB9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6903:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB8D175B-C001-4978-822E-6F50BB0EC85E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6905_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A3465E0-3ABB-4F92-B1E2-177324FAAE92",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6905:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "08FB9CC5-15DF-485B-9D21-352E5262ADCA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6904_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64C5116C-D942-4308-B203-316B44FBE4A8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6904:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "75974822-5B9D-4A62-8064-3256F512A759",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6907_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F7FA9D5-7998-408E-B1C6-EBB001854296",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6907:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6F32791-2597-4EB8-B456-3E7BAD998EAF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6908_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "211932B6-F00D-4D7B-A168-7EA747CCB921",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6908:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5D7C217-4F8D-46F9-AA17-BE8C53A7EEF4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6997_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "20483D02-4362-4BB9-8563-EA8AC058A4CD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6997:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AA70E93-3D24-4898-B480-280957F5AB80",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6998_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "434115EC-714C-4110-B1F7-244920D39333",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6998:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4194126F-3D60-4C32-A5BF-C3189DC8DA23",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:zh-jieli:ac6999_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6DE5F1B-14FB-4FD8-8371-8E12E663E4F8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zh-jieli:ac6999:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "76BB702E-A868-460D-BE2C-007B595A98EE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet."
    },
    {
      "lang": "es",
      "value": "Una implementaci\u00f3n de Bluetooth Classic en los dispositivos Zhuhai Jieli AC690X, no maneja apropiadamente la recepci\u00f3n de un paquete LMP de gran tama\u00f1o, superior a 17 bytes, durante el procedimiento de auto calificaci\u00f3n de LMP, permitiendo a atacantes en el rango de radio desencadenar un bloqueo por medio de un paquete LMP dise\u00f1ado"
    }
  ],
  "id": "CVE-2021-31612",
  "lastModified": "2024-11-21T06:06:01.633",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 6.5,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-09-07T07:15:07.093",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "http://www.zh-jieli.com/product/68-cn.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://launchstudio.bluetooth.com/ListingDetails/19746"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "http://www.zh-jieli.com/product/68-cn.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://launchstudio.bluetooth.com/ListingDetails/19746"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.