CVE-2024-2104: JBL: Improper BLE security configurations and lack of authentication on the device's GATT server
Published Dec 10, 2025
·Updated
Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable.
Affected Software
1 affected component
JBL Mobile Device
Event History
Dec 10, 2025
CVE Published
via MITRE·12:56 PM
Data Sourced
via MITRE·12:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-2104?
CVE-2024-2104 is categorized as a high-severity vulnerability due to its potential impact on device functionality.
2
How do I fix CVE-2024-2104?
To mitigate CVE-2024-2104, ensure proper configuration of BLE security settings on the GATT server of the device.
3
What devices are affected by CVE-2024-2104?
CVE-2024-2104 affects the JBL Mobile Device due to improper BLE security configurations.
4
What type of attack is possible with CVE-2024-2104?
CVE-2024-2104 allows adjacent unauthenticated attackers to read and write control commands through the mobile app service.
5
What are the implications of CVE-2024-2104 for users?
Users may experience device usability issues if CVE-2024-2104 is exploited by attackers.