CVE-2024-45431

{
  "id": "CVE-2024-45431",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-12T17:15:45.850",
  "lastModified": "2026-10-27T18:10:00.130",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID."
    },
    {
      "lang": "es",
      "value": "OpenSynergy BlueSDK (también conocido como Blue SDK) hasta la versión 6.x tiene una validación de entrada incorrecta. La falla específica existe dentro de la pila Bluetooth de BlueSDK. El problema se debe a la falta de validación adecuada del ID de canal L2CAP remoto (CID). Un atacante puede aprovechar esto para crear un canal L2CAP con el identificador nulo asignado como un CID remoto."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-12T17:28:27.597751Z",
          "id": "CVE-2024-45431",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "6.0.1",
              "matchCriteriaId": "B8C2A32B-8E89-48E8-9E3E-9E836F9FE579"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.opensynergy.com/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}