Description (CNA)
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fire-Boltt / BSW013 | affected 0 through V0.0.8 |
CWE
CWE-306
References
- https://github.com/Pratham-16/fireboltt-Bsw013-BLE-vuln
- https://www.vulncheck.com/advisories/fire-boltt-bsw013-through-v0-0.8-unauthenticated-ble-notification-injection
ADP enrichment
No English description supplied.