Texas Instruments CC256xC-BT-SP 1.2版本、CC256xB-BT-SP 1.8版本和WL18xx-BT-SP 4.4版本中存在安全漏洞。攻击者可利用该漏洞造成拒绝服务或执行任意代码。
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/856161
来源:MISC
链接:https://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/856161
来源:MISC
链接:https://www.youtube.com/watch?v=bk5lOxieqbA
来源:MISC
链接:https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/ti_wl18xx_adv_rce.py
来源:MISC
链接:https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs
来源:MISC
链接:https://www.linkedin.com/in/veronica-kovah-2587185
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-15948