Description (CNA)
Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| JBL / LIVE PRO 2 TWS | affected * |
| JBL / TUNE FLEX | affected * |
CWE
CWE-306
References
- https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2025/hbsa-2025-0001.json
- https://certvde.com/en/advisories/VDE-2024-076
ADP enrichment
No English description supplied.
No references supplied.