What is CVE-2021-34150?

CVE-2021-34150 is a medium-severity vulnerability in Bluetrum Ab5301a. CVSS score: 6.5/10. Published 2021-09-07.

How severe is CVE-2021-34150?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2021-34150 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Bluetrum Ab5301a

CVE-2021-34150

The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inquiry and page scan procedures) via a crafted LMP packet. The user needs to manually perform a power cycle (restart) of the device to restore BT connectivity.

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Public proof-of-concept exploits

References

cve@mitre.org (Product, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-34150?: CVE-2021-34150 is a medium-severity vulnerability in Bluetrum Ab5301a. CVSS score: 6.5/10. Published 2021-09-07.
How severe is CVE-2021-34150?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2021-34150 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.