CVE-2021-34150

The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inquiry and page scan procedures) via a crafted LMP packet. The user needs to manually perform a power cycle (restart) of the device to restore BT connectivity.

• http://www.bluetrum.com/product/ab5301a.htmlProduct, Vendor Advisory
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• http://www.bluetrum.com/product/ab5301a.htmlProduct, Vendor Advisory
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory

Published

Sep 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34144The Bluetooth Classic implementation in the Zhuhai Jieli AC6…6.5
• CVE-2021-34145The Bluetooth Classic implementation in the Cypress WICED BT…5.3
• CVE-2021-34146The Bluetooth Classic implementation in the Cypress CYW92073…6.5
• CVE-2021-34147The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34148The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34149The Bluetooth Classic implementation on the Texas Instrument…6.5
• CVE-2021-3416A potential stack overflow via infinite loop issue was found…6
• CVE-2021-34164Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authen…8.8
• CVE-2021-34165A SQL Injection vulnerability in Sourcecodester Basic Shoppi…9.8
• CVE-2021-34166A SQL INJECTION vulnerability in Sourcecodester Simple Food …9.8
• CVE-2021-34167Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.…8.8
• CVE-2021-3417An internal product security audit of LXCO, prior to version…4.9