CVE-2020-11921

{"id": "CVE-2020-11921", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-11-07T18:15:15.590", "references": [{"url": "https://seclists.org/fulldisclosure/2024/Jul/14", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Lush 2 hasta el 25 de febrero de 2020. Debido a la falta de cifrado del tr\u00e1fico Bluetooth, es posible secuestrar una conexi\u00f3n Bluetooth activa entre Lush 2 y un tel\u00e9fono m\u00f3vil. Esto permite que un atacante obtenga control total sobre el dispositivo."}], "lastModified": "2024-11-08T19:01:03.880", "sourceIdentifier": "cve@mitre.org"}