CVE-2019-12500: Medium severity mi m365 vulnerability
The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12500?
CVE-2019-12500 is considered a high severity vulnerability due to the potential for unsafe accelerations and braking affecting rider safety.
How do I fix CVE-2019-12500?
To fix CVE-2019-12500, upgrade the Xiaomi M365 scooter firmware to version 1.5.1 or later.
What devices are affected by CVE-2019-12500?
Devices affected by CVE-2019-12500 include the Xiaomi M365 scooter with firmware versions prior to 1.5.1.
What kind of commands can be spoofed due to CVE-2019-12500?
CVE-2019-12500 allows spoofing of commands such as sudden accelerations, sudden braking, locking, and unlocking.
Is there a known exploit for CVE-2019-12500?
Yes, CVE-2019-12500 has been exploited in the wild, demonstrating risks associated with Bluetooth Low Energy commands.