Jbl
3 CVEs across 16 Jbl products. Browse Jbl vulnerabilities, severities, and proof-of-concept exploits.
Jbl products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2105 | Medium | 6.5 | 2025-12-10 | An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices. |
CVE-2024-2104 | High | 8.8 | 2025-12-10 | Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands throug… |
CVE-2023-37215 | Medium | 6.2 | 2023-07-30 | JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials |
CVE-2021-28155 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attacker… |
CVE-2021-38548 | Medium | 5.9 | 2021-08-11 | JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor… |