The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.
References
| Link | Resource |
|---|---|
| https://dl.packetstormsecurity.net/papers/general/braktooth.pdf | Broken Link |
| https://github.com/espressif/esp-idf | Third Party Advisory |
| https://github.com/espressif/esp32-bt-lib | Third Party Advisory |
| https://www.espressif.com/en/products/socs/esp32 | Product |
Configurations
History
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other |
13 Sep 2021, 16:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.espressif.com/en/products/socs/esp32 - Product | |
| References | (MISC) https://github.com/espressif/esp-idf - Third Party Advisory | |
| References | (MISC) https://dl.packetstormsecurity.net/papers/general/braktooth.pdf - Broken Link | |
| References | (MISC) https://github.com/espressif/esp32-bt-lib - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 3.3
v3 : 6.5 |
| CWE | CWE-20 | |
| CPE | cpe:2.3:a:espressif:esp-idf:*:*:*:*:*:*:*:* |
07 Sep 2021, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-07 06:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-28135
Mitre link : CVE-2021-28135
CVE.ORG link : CVE-2021-28135
JSON object : View
Products Affected
espressif
- esp-idf
CWE