CVE-2021-31787
Last modified
CVE-2021-31787 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Actions-Semi | Ats2819p Firmware | All versions |
| Actions-Semi | Ats2815 Firmware | All versions |
| Actions-Semi | Ats2819 Firmware | All versions |
| Actions-Semi | Ats2819s Firmware | All versions |
| Actions-Semi | Ats2819t Firmware | All versions |
References
- https://launchstudio.bluetooth.com/ListingDetails/76427Third Party Advisory
- https://www.actions-semi.com/index.php?id=3581&siteId=4Vendor Advisory
- https://launchstudio.bluetooth.com/ListingDetails/76427Third Party Advisory
- https://www.actions-semi.com/index.php?id=3581&siteId=4Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-31787?
How severe is CVE-2021-31787?
How do I fix CVE-2021-31787?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-3178fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when t…6.5
- CVE-2021-31780In app/Model/MispObject.php in MISP 2.4.141, an incorrect sh…7.5
- CVE-2021-31783show_default.php in the LocalFilesEditor extension before 11…7.5
- CVE-2021-31784An out-of-bounds write vulnerability exists in the file-read…7.8
- CVE-2021-31785The Bluetooth Classic implementation on Actions ATS2815 and …6.5
- CVE-2021-31786The Bluetooth Classic Audio implementation on Actions ATS281…6.5
- CVE-2021-3179GGLocker iOS application, contains an insecure data storage …5.5
- CVE-2021-31791In Hardware Sentry KM before 10.0.01 for BMC PATROL, a clear…7.5
- CVE-2021-31792XSS in the client account page in SuiteCRM before 7.11.19 al…5.4
- CVE-2021-31793An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 dev…7.5
- CVE-2021-31794Settings.aspx?view=About in Directum 5.8.2 allows XSS via th…6.1
- CVE-2021-31795The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04…7
Are you affected by CVE-2021-31787?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST