Skip to content
OpenAdvisories
Medium VDE-2022-006 1 CVE

Endress+Hauser: FieldPort SFP50 Memory Corruption in Bluetooth Controller Firmware

Published Mar 24, 2022 · Updated Mar 24, 2022

Vendor: Endress+Hauser Product: FieldPort SFP50 (mobiLink) Product: mobiLink Bluetooth and USB modem in bundle with Field Xpert SMT50 Product: mobiLink Bluetooth and USB modem in bundle with Field Xpert SMT70 Product: mobiLink Bluetooth and USB modem in bundle with Field Xpert SMT77 Product: mobiLink BT and USB modem CN+KR in bundle with Field Xpert SMT70 Product: mobiLink BT and USB modem CN+KR in bundle with Field Xpert SMT77

Summary

Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service.

Details

Impact
Please consult the CVE entry above.

Mitigation
Endress+Hauser recommends using the FieldPort SFP50 only in secure environment and to allow access tothe devices only to authorized persons.

Remediation
Currently no fix planned from chip supplier.

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-35093

    Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denia…

    Qualcomm BlueCore

Revision history

  1. #1

    Initial revision.

References