Endress+Hauser: FieldPort SFP50 Memory Corruption in Bluetooth Controller Firmware
view advisory published 2022-03-24
Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-35093US | medium6.5 | — | ||
Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Mitigation
Endress+Hauser recommends using the FieldPort SFP50 only in secure environment and to allow access tothe devices only to authorized persons.
- No fix planned
Currently no fix planned from chip supplier.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan