CVE-2024-1638
CVSS 3.1 Score 8.2 of 10 (high)
Details
Summary
CVE-2024-1638 is a cyber vulnerability that affects Bluetooth characteristics. The vulnerability occurs when the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines are set for a Bluetooth characteristic without the additional permissions of BT_GATT_PERM_READ_ENCRYPT/BT_GATT_PERM_READ_AUTHEN (for read) or BT_GATT_PERM_WRITE_ENCRYPT/BT_GATT_PERM_WRITE_AUTHEN (for write). This allows unauthorized read/write access to the characteristics, even in secure connections mode. The vulnerability has a base severity of HIGH and a base score of 8.2 according to the CVSS:3.1 rating. It poses a potential danger to organizations as it could lead to unauthorized access and compromise of confidential information. Remediation for this vulnerability would involve ensuring that the appropriate additional permissions are set for Bluetooth characteristics.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions