ZDI-CAN-25177: ZDI-24-1229: BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-8805.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BlueZto a version that resolves this vulnerability.Patch ZDI-24-1229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CVE-2024-8805
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25177?
The severity of ZDI-CAN-25177 is critical due to its potential for arbitrary code execution by network-adjacent attackers.
How do I fix ZDI-CAN-25177?
To fix ZDI-CAN-25177, update to the latest version of BlueZ that addresses this vulnerability.
What systems are affected by ZDI-CAN-25177?
ZDI-CAN-25177 affects installations of BlueZ that implement the HID over GATT Profile.
Is authentication required to exploit ZDI-CAN-25177?
No, authentication is not required to exploit ZDI-CAN-25177, making it a significant risk.
Can ZDI-CAN-25177 lead to further attacks?
Yes, exploitation of ZDI-CAN-25177 could allow attackers to execute arbitrary code, potentially leading to additional security breaches.