Detections
Analytics
CVE-2021-28155
medium
Description
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data.
References
https://www.jbl.com.sg/over-ear-headphones/JBL+TUNE500BT.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14853
https://dl.packetstormsecurity.net/papers/general/braktooth.pdf