CVE-2021-34144

Published: Sep 7, 2021Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMP_SCO_Link_Request packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inquiry and page scan procedures) via a crafted LMP packet. The user needs to manually perform a power cycle (restart) of the device to restore BT connectivity.

Affected (1)

Products: Zh Jieli: Fw Ac63 Bt Sdk

Zh Jieli

1 product

Fw Ac63 Bt Sdk

Configuration A

1 vulnerable · 14 platform

Vulnerable Software	Affected Versions
Zh Jieli Fw Ac63 Bt Sdk	Up to 0.9.1

Running on/with	Platform Versions
Zh Jieli Ac6936	All versions
Zh Jieli Ac6951	All versions
Zh Jieli Ac6952	All versions
Zh Jieli Ac6954	All versions
Zh Jieli Ac6955	All versions
Zh Jieli Ac6956	All versions
Zh Jieli Ac6963	All versions
Zh Jieli Ac6965	All versions
Zh Jieli Ac6966	All versions
Zh Jieli Ac6969	All versions
Zh Jieli Ac6973	All versions
Zh Jieli Ac6976	All versions
Zh Jieli Ac6983	All versions
Zh Jieli Ac6986	All versions