CVE-2024-1638: Bluetooth characteristic LESC security requirement not enforced without additional flags
The documentation specifies that the BTGATTPERMREADLESC and BTGATTPERMWRITELESC defines for a Bluetooth characteristic: Attribute read/write permission with LE Secure Connection encryption. If set, requires that LE Secure Connections is used for read/write access, however this is only true when it is combined with other permissions, namely BTGATTPERMREADENCRYPT/BTGATTPERMREADAUTHEN (for read) or BTGATTPERMWRITEENCRYPT/BTGATTPERMWRITEAUTHEN (for write), if these additional permissions are not set (even in secure connections only mode) then the stack does not perform any permission checks on these characteristics and they can be freely written/read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1638?
CVE-2024-1638 is classified as a medium severity vulnerability.
How do I fix CVE-2024-1638?
To fix CVE-2024-1638, upgrade to a version of Zephyr Project Manager that is higher than 3.5.0.
What systems are affected by CVE-2024-1638?
CVE-2024-1638 affects versions of the Zephyr Project up to and including 3.5.0.
What does CVE-2024-1638 involve?
CVE-2024-1638 involves improper handling of attribute read/write permissions for Bluetooth characteristics using LE Secure Connections.
Is CVE-2024-1638 related to Bluetooth security?
Yes, CVE-2024-1638 specifically concerns security implications in Bluetooth characteristic permissions.