Sooma Tdcs Home Therapy
Monthly
Unauthenticated attackers within Bluetooth range can modify brain stimulation parameters on Sooma 2GEN tDCS home therapy devices, potentially disrupting therapy or causing unintended stimulation. The flaw (CWE-924) stems from missing integrity and authentication checks on Bluetooth control messages; exploitation requires only physical proximity, with no privileges or user interaction needed. No public exploit code or active exploitation has been identified at time of analysis, and no vendor-released patch is identified at time of analysis.
Unauthenticated attackers within Bluetooth range can modify brain stimulation parameters on Sooma 2GEN tDCS home therapy devices, potentially disrupting therapy or causing unintended stimulation. The flaw (CWE-924) stems from missing integrity and authentication checks on Bluetooth control messages; exploitation requires only physical proximity, with no privileges or user interaction needed. No public exploit code or active exploitation has been identified at time of analysis, and no vendor-released patch is identified at time of analysis.