
CVE-2021-34145 – BRAKTOOTH: Causing Havoc on Bluetooth Link Manager
https://notcve.org/view.php?id=CVE-2021-34145
03 Sep 2021 — The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and LT_ADDRESS and LT_ADDR) after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet. Una implementación de Bluetooth Classic en la pila WICED BT de Cypress versiones hasta 2.9.0, para los dispositivos CYW20735B1 no mane... • https://dl.packetstormsecurity.net/papers/general/braktooth.pdf •

CVE-2021-34147 – BRAKTOOTH: Causing Havoc on Bluetooth Link Manager
https://notcve.org/view.php?id=CVE-2021-34147
03 Sep 2021 — The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually trigger a crash via multiple attempts of sending a crafted LMP timing accuracy response followed by a sudden reconnection with a random BDAddress. Una implementación de Bluetooth Classic en la pila BT de Cypress WI... • https://dl.packetstormsecurity.net/papers/general/braktooth.pdf •

CVE-2021-34148 – BRAKTOOTH: Causing Havoc on Bluetooth Link Manager
https://notcve.org/view.php?id=CVE-2021-34148
03 Sep 2021 — The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet. Una implementación de Bluetooth Classic en la pila WICED BT de Cypress versiones hasta 2.9.0 para los dispositivos CYW20735B1, no maneja apropiadamente la recepción de LMP_ma... • https://dl.packetstormsecurity.net/papers/general/braktooth.pdf •