CVE-2021-40526 — MEDIUM (4.8)

Q: How severe is CVE-2021-40526?

CVE-2021-40526 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-40526?

Check the references section above for vendor advisories and patch information. Affected products include: Onepeloton Ttr01 Firmware, Onepeloton Ttr01.

Vulnerability Description

Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handling the Apple GymKit communication. This can lead to an Apple MFI device not being able to authenticate with the Peleton Bike

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Onepeloton	Ttr01 Firmware	<= ptv55g
Onepeloton	Ttr01	-

Related Weaknesses (CWE)

CWE-131

References

https://twitter.com/ROPsicle/status/1438216078103044107?s=20Third Party Advisory
https://twitter.com/ROPsicle/status/1438216078103044107?s=20Third Party Advisory

FAQ

What is CVE-2021-40526?

CVE-2021-40526 is a vulnerability with a CVSS score of 4.8 (MEDIUM). Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by explo...

How severe is CVE-2021-40526?

CVE-2021-40526 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-40526?

Check the references section above for vendor advisories and patch information. Affected products include: Onepeloton Ttr01 Firmware, Onepeloton Ttr01.