The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.
References
Link | Resource |
---|---|
https://www.securityfocus.com/bid/93877 | Third Party Advisory VDB Entry |
https://www.kb.cert.org/vuls/id/402847 | Third Party Advisory US Government Resource |
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-07-13 13:29
Updated : 2019-10-09 16:19
NVD link : CVE-2016-6549
Mitre link : CVE-2016-6549
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
nutspace
- nut_mobile