EUVD-2026-80739
GHSA-6rh6-h2w9-cj6x
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Bluetooth proximity gives AV:A, no auth/interaction gives PR:N/UI:N; unauthenticated parameter tampering yields I:L and therapy disruption A:L with no data exposure (C:N).
Primary rating from Vendor (NCSC-FI).
CVSS VectorVendor: NCSC-FI
Lifecycle Timeline
2DescriptionCVE.org
In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters.
AnalysisAI
Unauthenticated attackers within Bluetooth range can modify brain stimulation parameters on Sooma 2GEN tDCS home therapy devices, potentially disrupting therapy or causing unintended stimulation. The flaw (CWE-924) stems from missing integrity and authentication checks on Bluetooth control messages; exploitation requires only physical proximity, with no privileges or user interaction needed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be within Bluetooth radio range (AV:A) of a powered-on Sooma 2GEN / tDCS home-therapy stimulator; no authentication, user interaction, or special privileges are needed (PR:N/UI:N) because the device does not enforce integrity/authentication on Bluetooth control messages (CWE-924). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are consistent and point to a moderate, safety-relevant but access-constrained issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today