CVE-2021-31609
First published: Tue Sep 07 2021(Updated: )
The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Silabs Iwrap | <=6.3.0 | |
| Silabs Wt32i-a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2021-31609.
What is the affected software?
The affected software is Silicon Labs iWRAP 6.3.0 and earlier.
What is the severity of CVE-2021-31609?
The severity of CVE-2021-31609 is medium.
How can this vulnerability be exploited?
This vulnerability can be exploited by attackers in radio range who can trigger a crash in WT32i by sending a crafted LMP packet.
Is there a fix available for this vulnerability?
There is no information available regarding a fix for this vulnerability at the moment.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/silabs
- canonical/silabs iwrap
- version/silabs iwrap/6.3.0
- canonical/silabs wt32i-a