An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter.
References
| Link | Resource |
|---|---|
| https://github.com/actuator/7-Eleven-Bluetooth-Smart-Cup-Jailbreak | Exploit |
| https://github.com/actuator/cve/blob/main/CVE-2023-34761 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
06 Jul 2023, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other | |
| CPE | cpe:2.3:h:7-eleven:led_message_cup:-:*:*:*:*:*:*:* cpe:2.3:a:7-eleven:hello_cup:1.3.1:*:*:*:*:android:*:* |
|
| First Time |
7-eleven
7-eleven led Message Cup 7-eleven hello Cup |
|
| References | (MISC) https://github.com/actuator/7-Eleven-Bluetooth-Smart-Cup-Jailbreak - Exploit | |
| References | (MISC) https://github.com/actuator/cve/blob/main/CVE-2023-34761 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
28 Jun 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-28 20:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-34761
Mitre link : CVE-2023-34761
CVE.ORG link : CVE-2023-34761
JSON object : View
Products Affected
7-eleven
- hello_cup
- led_message_cup
CWE