
CVE-2021-31785 – BRAKTOOTH: Causing Havoc on Bluetooth Link Manager
https://notcve.org/view.php?id=CVE-2021-31785
03 Sep 2021 — The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication. Una implementación de Bluetooth Classic en los conjuntos de chips Actions ATS2815 y ATS2819, no maneja apropiadamente la recepción de múltip... • https://dl.packetstormsecurity.net/papers/general/braktooth.pdf • CWE-667: Improper Locking •

CVE-2021-31786 – BRAKTOOTH: Causing Havoc on Bluetooth Link Manager
https://notcve.org/view.php?id=CVE-2021-31786
03 Sep 2021 — The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forged BDAddress that matches the original connected host. Una implementación de Bluetooth Classic Audio en los dispositivos Actions ATS2815 y ATS2819, no maneja apropiadamente un intento de conexión desde un host con la... • https://dl.packetstormsecurity.net/papers/general/braktooth.pdf • CWE-667: Improper Locking •

CVE-2019-12305
https://notcve.org/view.php?id=CVE-2019-12305
16 Oct 2020 — In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access the administration panel of the device. En EZCast Pro II, el hash md5 de la contraseña de administrador es proporcionado mediante una petición web. Este hash puede ser descifrado para acceder al panel de administración del dispositivo • https://digital.security/advisories/cert-ds_advisory-ezcast_pro_ii_admin_password-cve-2019-12305.txt •