Summary
Due to improper BLE security configurations and lack of authentication on the GATT server of JBL LIVE PRO 2 TWS and JBL TUNE FLEX Headphones, unauthenticated users can read and write device control commands through the mobile app service.
Details
Impact
The vulnerabilities in headphones allow attackers to control settings, eavesdrop on data exchanges, and tamper with the device by sending altered firmware updates, potentially leading to unauthorized code execution or rendering the device unusable.
Mitigation
There is no known mitigation at this moment.
Remediation
There is no known remediation at this moment.
Vulnerabilities 1
-
High 8.8
JBL: Improper BLE security configurations and lack of authentication on the device's GATT server
Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable.
Revision history
-
#1.0.0
Initial version
References
-
CERT@VDE Security Advisories for Harman
https://certvde.com/en/advisories/vendor/harmann/
-
HBSA-2025-0001: BLE GATT Service Vulnerability in JBL Headphones - HTML
https://certvde.com/en/advisories/VDE-2024-076