EUVD-2026-72778
GHSA-8w9v-2427-496x
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Bluetooth L2CAP is an adjacent-range protocol, not network-reachable; AV:A corrects the provided AV:N; no auth, no scope change, availability-only impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
AnalysisAI
Denial of service in Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows an unauthenticated attacker within Bluetooth range to crash the device by sending a specially crafted L2CAP packet targeting the btm_acl_handle() function. The vulnerability stems from uncontrolled resource consumption (CWE-400) in the Bluetooth stack's ACL connection handler, causing the firmware to exhaust resources or reach an unhandled state upon receipt of malformed input. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must be within Bluetooth radio range of the target device (typically 10-30 metres for Class 2 devices, up to 100 metres for Class 1). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS vector of AV:N is likely overstated for this vulnerability class; Bluetooth L2CAP is a short-range wireless protocol requiring the attacker to be within Bluetooth radio range of the target device, which maps to AV:A (Adjacent) under CVSS 3.1 methodology, not AV:N (Network). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade BES2300 firmware to a version beyond v3.x once Bestechnic releases a patched build; no vendor-released patch version has been independently confirmed from the available references at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of products and systems using Bestechnic BES2300 firmware v3.x or earlier, including internal devices and customer-facing products. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today