1. Home
  2. CVE Database
  3. CVE-2019-19193
MEDIUM · 6.5

CVE-2019-19193

The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not...

Vulnerability Description

The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict the advertisement connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
TiBle-Stack<= 1.5.0
TiCc2640R2 Software Development Kit<= 3.30.00.20
TiCc2540\/1< q4_2019
TiCc2640R2< q4_2019

References

FAQ

What is CVE-2019-19193?

CVE-2019-19193 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not...

How severe is CVE-2019-19193?

CVE-2019-19193 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-19193?

Check the references section above for vendor advisories and patch information. Affected products include: Ti Ble-Stack, Ti Cc2640R2 Software Development Kit, Ti Cc2540\/1, Ti Cc2640R2.