CVE-2020-11539

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices

published April 22, 2020

CVSS
—
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01042 · 63.8th percentile
Published
2020-04-22T13:27Z
EPSS history
Timeline
  • 22 APR 13:27Z
    An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices
    cvelistv5