CVE-2019-19195

The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.

CVSS v3 6.5 MEDIUM
CVSS v2.0 6.1 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 6.5 / Impact : 6.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://asset-group.github.io/disclosures/sweyntooth/	Third Party Advisory
https://www.microchip.com/wwwproducts/en/ATSAMB11	Product Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:microchip:atmsamb11_blusdk_smart:*:*:*:*:*:*:*:*

cpe:2.3:h:microchip:atsamb11:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-02-10 21:51

Updated : 2024-02-28 17:28

NVD link : CVE-2019-19195

Mitre link : CVE-2019-19195

CVE.ORG link : CVE-2019-19195

JSON object : View

Products Affected

microchip

atmsamb11_blusdk_smart
atsamb11

CWE

NVD-CWE-noinfo

{"id": "CVE-2019-19195", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.1, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2020-02-10T21:51:32.923", "references": [{"url": "https://asset-group.github.io/disclosures/sweyntooth/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.microchip.com/wwwproducts/en/ATSAMB11", "tags": ["Product", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet."}, {"lang": "es", "value": "La implementaci\u00f3n de Bluetooth Low Energy en la tecnolog\u00eda Microchip BluSDK Smart versiones hasta 6.2 para dispositivos ATSAMB11, no restringe apropiadamente la longitud de los datos de la capa de enlace en la recepci\u00f3n, permitiendo a atacantes dentro del radio de alcance causar una denegaci\u00f3n de servicio (bloqueo) por medio de un paquete dise\u00f1ado."}], "lastModified": "2020-02-13T16:09:35.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microchip:atmsamb11_blusdk_smart:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEBE5B57-A74C-4A14-A1F5-BF2A99F4F602", "versionEndIncluding": "6.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microchip:atsamb11:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "32F7B5EE-A1CD-4E5E-8902-55D0A761796F"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}