Bt122
Monthly
Denial of service in the Silicon Labs BT122 Bluetooth module is triggered by an adjacent unauthenticated attacker who transmits a forged, unencrypted 'pause encryption request' control message, causing the module to crash or become unresponsive. The flaw, cataloged as vulnerability B-E10 in academic research (arXiv:2409.02905), exploits the module's failure to enforce encryption state validation on incoming link-layer control messages. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; exploitation is bounded by Bluetooth radio adjacency.
Memory disclosure in the Silicon Labs BT122 Bluetooth module allows unauthenticated adjacent attackers to leak potentially sensitive device memory by sending a malformed Bluetooth connection request. The root cause is a buffer over-read (CWE-126) in the firmware's connection request parser, identified as finding B-E4 in academic research published on arXiv (2409.02905). No public exploit code and no CISA KEV listing have been identified at time of analysis; risk is constrained by Bluetooth radio range and the niche embedded deployment footprint of the BT122.
Denial of service in the Silicon Labs BT122 Bluetooth module allows any adjacent attacker to permanently stop the module from advertising by sending a single plaintext 'pause encryption response' message. Documented as vulnerability B-E2 in an academic Bluetooth security paper (arXiv:2409.02905), this flaw causes the device to cease Bluetooth advertising without validation of whether the control message was delivered over an encrypted channel. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Denial of service in the Silicon Labs BT122 Bluetooth module is triggered by an adjacent unauthenticated attacker who transmits a forged, unencrypted 'pause encryption request' control message, causing the module to crash or become unresponsive. The flaw, cataloged as vulnerability B-E10 in academic research (arXiv:2409.02905), exploits the module's failure to enforce encryption state validation on incoming link-layer control messages. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; exploitation is bounded by Bluetooth radio adjacency.
Memory disclosure in the Silicon Labs BT122 Bluetooth module allows unauthenticated adjacent attackers to leak potentially sensitive device memory by sending a malformed Bluetooth connection request. The root cause is a buffer over-read (CWE-126) in the firmware's connection request parser, identified as finding B-E4 in academic research published on arXiv (2409.02905). No public exploit code and no CISA KEV listing have been identified at time of analysis; risk is constrained by Bluetooth radio range and the niche embedded deployment footprint of the BT122.
Denial of service in the Silicon Labs BT122 Bluetooth module allows any adjacent attacker to permanently stop the module from advertising by sending a single plaintext 'pause encryption response' message. Documented as vulnerability B-E2 in an academic Bluetooth security paper (arXiv:2409.02905), this flaw causes the device to cease Bluetooth advertising without validation of whether the control message was delivered over an encrypted channel. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.