VULNERABILITY INTELLIGENCE

CVE-2021-34150

CVSS score6.5 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2021-09-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inquiry and page scan procedures) via a crafted LMP packet. The user needs to manually perform a power cycle (restart) of the device to restore BT connectivity.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

cve@mitre.org — Product, Vendor Advisory
cve@mitre.org — Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Technical Description, Third Party Advisory