What is CVE-2019-19192?

CVE-2019-19192 is a medium-severity vulnerability in St Bluenrg-2, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2020-02-12.

How severe is CVE-2019-19192?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2019-19192 known to be exploited?

7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in St Bluenrg-2

CVE-2019-19192

The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (60.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

St Bluenrg-2
St Wb55
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-19192?: CVE-2019-19192 is a medium-severity vulnerability in St Bluenrg-2, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2020-02-12.
How severe is CVE-2019-19192?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2019-19192 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.