CVE-2024-1638
Last modified
CVE-2024-1638 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines for a Bluetooth characteristic: Attribute read/write permission with LE Secure Connection encryption. If set, requires that LE Secure Connections is used for read/write access, however this is only true when it is combined with other permissions, namely BT_GATT_PERM_READ_ENCRYPT/BT_GATT_PERM_READ_AUTHEN (for read) or BT_GATT_PERM_WRITE_ENCRYPT/BT_GATT_PERM_WRITE_AUTHEN (for write), if these additional permissions are not set (even in secure connections only mode) then the stack does not perform any permission checks on these characteristics and they can be freely written/read.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines for a Bluetooth characteristic: Attribute read/write permission with LE Secure Connection encryption. If set, requires that LE Secure Connections is used for read/write access, however this is only true when it is combined with other permissions, namely BT_GATT_PERM_READ_ENCRYPT/BT_GATT_PERM_READ_AUTHEN (for read) or BT_GATT_PERM_WRITE_ENCRYPT/BT_GATT_PERM_WRITE_AUTHEN (for write), if these additional permissions are not set (even in secure connections only mode) then the stack does not perform any permission checks on these characteristics and they can be freely written/read.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zephyrproject | Zephyr | <= 3.5.0 |
References
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p6f3-f63q-5mc2Exploit, Vendor Advisory
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p6f3-f63q-5mc2Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-1638?
How severe is CVE-2024-1638?
How do I fix CVE-2024-1638?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-1632Low-privileged users with access to the Sitefinity backend m…6.5
- CVE-2024-1633During the secure boot, bl2 (the second stage of the bootloa…2
- CVE-2024-1634The Scheduling Plugin – Online Booking for WordPress plugin …6.5
- CVE-2024-1635A vulnerability was found in Undertow. This vulnerability im…7.5
- CVE-2024-1636Potential Cross-Site Scripting (XSS) in the page editing are…5.4
- CVE-2024-1637The 360 Javascript Viewer plugin for WordPress is vulnerable…4.3
- CVE-2024-1639The License Manager for WooCommerce plugin for WordPress is …6.5
- CVE-2024-1640The Contact Form Builder Plugin: Multi Step Contact Form, Pa…5.3
- CVE-2024-1641The Accordion plugin for WordPress is vulnerable to unauthor…5.4
- CVE-2024-1642The MainWP Dashboard – WordPress Manager for Multiple Websi…4.3
- CVE-2024-1643By knowing an organization's ID, an attacker can join the or…9.1
- CVE-2024-1644Suite CRM version 7.14.2 allows including local php files. T…8.8
Are you affected by CVE-2024-1638?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST