CVE-2024-45431

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://pcacybersecurity.com/resources/advisory/perfekt-blue	Exploit Third Party Advisory
https://www.opensynergy.com/	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*

History

27 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) OpenSynergy BlueSDK (también conocido como Blue SDK) hasta la versión 6.x tiene una validación de entrada incorrecta. La falla específica existe dentro de la pila Bluetooth de BlueSDK. El problema se debe a la falta de validación adecuada del ID de canal L2CAP remoto (CID). Un atacante puede aprovechar esto para crear un canal L2CAP con el identificador nulo asignado como un CID remoto.

Information

Published : 2025-09-12 17:15

Updated : 2026-10-27 18:10

NVD link : CVE-2024-45431

Mitre link : CVE-2024-45431

CVE.ORG link : CVE-2024-45431

JSON object : View

Products Affected

opensynergy

blue_sdk

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2024-45431", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-45431", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-12T17:28:27.597751Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-09-12T17:15:45.850", "references": [{"url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.opensynergy.com/", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID."}, {"lang": "es", "value": "OpenSynergy BlueSDK (tambi\u00e9n conocido como Blue SDK) hasta la versi\u00f3n 6.x tiene una validaci\u00f3n de entrada incorrecta. La falla espec\u00edfica existe dentro de la pila Bluetooth de BlueSDK. El problema se debe a la falta de validaci\u00f3n adecuada del ID de canal L2CAP remoto (CID). Un atacante puede aprovechar esto para crear un canal L2CAP con el identificador nulo asignado como un CID remoto."}], "lastModified": "2026-10-27T18:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8C2A32B-8E89-48E8-9E3E-9E836F9FE579", "versionEndIncluding": "6.0.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}