CVE-2020-15531 - Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data

Back Back to CVE browser

HIGH

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data

Published Aug 19, 2020

8.8

HIGH

CVSS 3.1

EPSS 3.16%

Description

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7518
Advisory
https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/silabs_efr32_extadv_rce.py
x_refsource_MISCExploitThird Party Advisory
https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs
x_refsource_MISCThird Party Advisory
https://www.blackhat.com/us-20/briefings/schedule/#finding-new-bluetooth-low-energy-exploits-via-reverse-engineering-multiple-vendors-firmwares-19655
x_refsource_MISCThird Party Advisory
https://www.youtube.com/watch?v=saoTr1NwdzM
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7518		Advisory
https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/silabs_efr32_extadv_rce.py		x_refsource_MISCExploitThird Party Advisory
https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs		x_refsource_MISCThird Party Advisory
https://www.blackhat.com/us-20/briefings/schedule/#finding-new-bluetooth-low-energy-exploits-via-reverse-engineering-multiple-vendors-firmwares-19655		x_refsource_MISCThird Party Advisory
https://www.youtube.com/watch?v=saoTr1NwdzM		x_refsource_MISCExploitThird Party Advisory