CVE-2023-49914
Last modified
CVE-2023-49914 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstanding, calm meditation state) via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of a strong RF carrier, and alert the user that a report may be misleading if this carrier has been modulated by a low-frequency signal.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstanding, calm meditation state) via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of a strong RF carrier, and alert the user that a report may be misleading if this carrier has been modulated by a low-frequency signal.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Choosemuse | Muse 2 Firmware | All versions |
References
- https://dl.acm.org/doi/10.1145/3605758.3623497Technical Description
- https://dl.acm.org/doi/10.1145/3605758.3623497Technical Description
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-49914?
How severe is CVE-2023-49914?
How do I fix CVE-2023-49914?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-49909A stack-based buffer overflow vulnerability exists in the we…8.8
- CVE-2023-4991A vulnerability was found in NextBX QWAlerter 4.50. It has b…7.8
- CVE-2023-49910A stack-based buffer overflow vulnerability exists in the we…8.8
- CVE-2023-49911A stack-based buffer overflow vulnerability exists in the we…8.8
- CVE-2023-49912A stack-based buffer overflow vulnerability exists in the we…8.8
- CVE-2023-49913A stack-based buffer overflow vulnerability exists in the we…8.8
- CVE-2023-49920Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerabi…6.5
- CVE-2023-49921An issue was discovered by Elastic whereby Watcher search in…6.5
- CVE-2023-49922An issue was discovered by Elastic whereby Beats and Elastic…6.5
- CVE-2023-49923 An issue was discovered by Elastic whereby the Documents AP…6.5
- CVE-2023-49926app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 a…6.1
- CVE-2023-49927An issue was discovered in Samsung Mobile Processor, Wearabl…5.3
Are you affected by CVE-2023-49914?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST