{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-09-07T06:32:06", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.zh-jieli.com/product/68-cn.html"}, {"tags": ["x_refsource_MISC"], "url": "https://launchstudio.bluetooth.com/ListingDetails/19746"}, {"tags": ["x_refsource_MISC"], "url": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-31612", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.zh-jieli.com/product/68-cn.html", "refsource": "MISC", "url": "http://www.zh-jieli.com/product/68-cn.html"}, {"name": "https://launchstudio.bluetooth.com/ListingDetails/19746", "refsource": "MISC", "url": "https://launchstudio.bluetooth.com/ListingDetails/19746"}, {"name": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf", "refsource": "MISC", "url": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2021-31612", "datePublished": "2021-09-07T06:32:06", "dateReserved": "2021-04-23T00:00:00", "dateUpdated": "2021-09-07T06:32:06", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6901_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A68BB39A-4A9C-4B57-9D29-12601FCFC763", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6901:-:*:*:*:*:*:*:*", "matchCriteriaId": "06EBB244-F958-45C8-84B5-DFB3BA3E9449", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac690n_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "78A24F18-DFE9-44B7-990A-D15F7440DB91", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac690n:-:*:*:*:*:*:*:*", "matchCriteriaId": "737F0352-0A9E-4242-B595-78C47C6655D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac692n_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "00D94121-902F-4C9A-8BE8-D7B1A9910955", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac692n:-:*:*:*:*:*:*:*", "matchCriteriaId": "20A1E4AC-5F0C-4FBD-99ED-1EE81AC44A67", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6902_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DA40F06-EAA2-4DD5-B223-F8A024611B93", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6902:-:*:*:*:*:*:*:*", "matchCriteriaId": "9EED7E82-F385-4BF4-92C3-F1D87D4B27A0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6903_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA6F3C19-43E8-4917-B8D2-FE7D9DB06DB9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6903:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB8D175B-C001-4978-822E-6F50BB0EC85E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6905_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A3465E0-3ABB-4F92-B1E2-177324FAAE92", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6905:-:*:*:*:*:*:*:*", "matchCriteriaId": "08FB9CC5-15DF-485B-9D21-352E5262ADCA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6904_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "64C5116C-D942-4308-B203-316B44FBE4A8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6904:-:*:*:*:*:*:*:*", "matchCriteriaId": "75974822-5B9D-4A62-8064-3256F512A759", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6907_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6F7FA9D5-7998-408E-B1C6-EBB001854296", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6907:-:*:*:*:*:*:*:*", "matchCriteriaId": "B6F32791-2597-4EB8-B456-3E7BAD998EAF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6908_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "211932B6-F00D-4D7B-A168-7EA747CCB921", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6908:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5D7C217-4F8D-46F9-AA17-BE8C53A7EEF4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6997_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "20483D02-4362-4BB9-8563-EA8AC058A4CD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6997:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AA70E93-3D24-4898-B480-280957F5AB80", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6998_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "434115EC-714C-4110-B1F7-244920D39333", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6998:-:*:*:*:*:*:*:*", "matchCriteriaId": "4194126F-3D60-4C32-A5BF-C3189DC8DA23", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zh-jieli:ac6999_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6DE5F1B-14FB-4FD8-8371-8E12E663E4F8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zh-jieli:ac6999:-:*:*:*:*:*:*:*", "matchCriteriaId": "76BB702E-A868-460D-BE2C-007B595A98EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet."}, {"lang": "es", "value": "Una implementaci\u00f3n de Bluetooth Classic en los dispositivos Zhuhai Jieli AC690X, no maneja apropiadamente la recepci\u00f3n de un paquete LMP de gran tama\u00f1o, superior a 17 bytes, durante el procedimiento de auto calificaci\u00f3n de LMP, permitiendo a atacantes en el rango de radio desencadenar un bloqueo por medio de un paquete LMP dise\u00f1ado"}], "id": "CVE-2021-31612", "lastModified": "2021-09-15T00:02:27.800", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-09-07T07:15:07.093", "references": [{"source": "cve@mitre.org", "tags": ["Product", "Vendor Advisory"], "url": "http://www.zh-jieli.com/product/68-cn.html"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://launchstudio.bluetooth.com/ListingDetails/19746"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}