CVSS 3.1
6.5 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-31786
Medium (6.5) in actions-semi. EPSS 0.4% chance of exploitation in the next 30 days.
The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forged BDAddress that matches the original connected host.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWE
- CWE-667
- Published
- Modified
- Record from
- the NVD, synced
Affected
- actions-semi:ats2815_firmware
- actions-semi:ats2819_firmware
- actions-semi:ats2819p_firmware
- actions-semi:ats2819s_firmware
- actions-semi:ats2819t_firmware