the-girl-who-lived/CVE-2020-11539

the-girl-who-lived/CVE-2020-11539

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Improper Access Control in Tata Sonata Smartband
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-11539↗
8.1 HIGH4.8 MEDIUM

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device.