CVE-2021-34143

6.5 mediumEPSS 0.7%

Medium (6.5) in zh-jieli fw-ac63 bt sdk. EPSS 0.7% chance of exploitation in the next 30 days.

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMP_AU_Rand packets after paging procedure. User intervention is required to restart the device.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-11-01)
Published: 2021-09-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zh-jieli:fw-ac63_bt_sdk

References

https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
https://github.com/Jieli-Tech/fw-AC63_BT_SDK
https://launchstudio.bluetooth.com/ListingDetails/91371
https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
https://github.com/Jieli-Tech/fw-AC63_BT_SDK

Check your stack JSON