What is CVE-2019-16518?

CVE-2019-16518 is a medium-severity vulnerability in Vandyvape Swell Kit Mod, classified under Exposure of Resource to Wrong Sphere. CVSS score: 4.3/10. Published 2019-09-23.

How severe is CVE-2019-16518?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Vandyvape Swell Kit Mod

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets that specify large power or voltage values.

EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Vandyvape Swell_kit_mod
Vandyvape Swell_kit_mod_firmware — versions 2.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-16518?: CVE-2019-16518 is a medium-severity vulnerability in Vandyvape Swell Kit Mod, classified under Exposure of Resource to Wrong Sphere. CVSS score: 4.3/10. Published 2019-09-23.
How severe is CVE-2019-16518?: Medium severity. CVSS v3 base score is 4.3 out of 10.