CVE-2019-19192: Input Validation

Q: What is CVE-2019-19192?

CVE-2019-19192 is a vulnerability in the Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices.

Q: How does CVE-2019-19192 affect St Wb55?

CVE-2019-19192 affects St Wb55 devices with BLE Stack versions up to 1.3.1.

Q: How does CVE-2019-19192 affect St Bluenrg-2?

CVE-2019-19192 affects St Bluenrg-2 devices with BLE Stack versions up to 1.3.1.

Q: What is the severity of CVE-2019-19192?

CVE-2019-19192 has a severity rating of medium, with a CVSS score of 6.5.

Q: How can I mitigate the CVE-2019-19192 vulnerability?

There is no known mitigation for CVE-2019-19192 at this time, please refer to the vendor for any available patches or updates.

Published Feb 12, 2020

Updated

The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets.

Affected Software

4 affected components

ST Wb55<=1.3.1

ST Wb55

ST Bluenrg-2<=1.3.1

ST Bluenrg-2

Event History

Feb 12, 2020

CVE Published

via MITRE·06:08 PM

Data Sourced

via MITRE·06:08 PM

Description

Frequently Asked Questions

What is CVE-2019-19192?

CVE-2019-19192 is a vulnerability in the Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices.

How does CVE-2019-19192 affect St Wb55?

CVE-2019-19192 affects St Wb55 devices with BLE Stack versions up to 1.3.1.

How does CVE-2019-19192 affect St Bluenrg-2?

CVE-2019-19192 affects St Bluenrg-2 devices with BLE Stack versions up to 1.3.1.

What is the severity of CVE-2019-19192?

CVE-2019-19192 has a severity rating of medium, with a CVSS score of 6.5.

How can I mitigate the CVE-2019-19192 vulnerability?