CVE-2021-31787

Katalog CVE

CVSS 6.5 · Medium EPSS 0,51%

Kerentanan Allocation of Resources Without Limits or Throttling pada actions-semi ats2819p firmware, actions-semi ats2815 firmware +3 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets.

Rincian

Terbit di NVD

30 November 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 41,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.actions-semi.com/index.php?id=3581&siteId=4 advisory vendor
• https://launchstudio.bluetooth.com/ListingDetails/76427 advisory pihak ketiga
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf broken link