CVE-2021-34149: Medium severity ti cc256xbt-sp firmware vulnerability

Published Sep 7, 2021

Updated

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMPAURand packets after the paging procedure.

Affected Software

2 affected components

ti Cc256xcqfn-em Firmware

ti CC256XCQFN-EM

Event History

Sep 7, 2021

CVE Published

via MITRE·06:16 AM

Data Sourced

via MITRE·06:16 AM

Description

Frequently Asked Questions

What is CVE-2021-34149?

CVE-2021-34149 is a vulnerability related to the Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM.

What is the severity of CVE-2021-34149?

The severity of CVE-2021-34149 is medium with a CVSS score of 6.5.

How does CVE-2021-34149 affect the Texas Instruments CC256XCQFN-EM?

CVE-2021-34149 allows attackers in radio range to trigger a denial of service (deadlock) by flooding the device with LMP_AU_Rand packets.

Is the Ti Cc256xcqfn-em firmware vulnerable?

Yes, the Ti Cc256xcqfn-em firmware is vulnerable to CVE-2021-34149.

How can I fix CVE-2021-34149?

To mitigate CVE-2021-34149, it is recommended to apply the necessary firmware updates provided by Texas Instruments.