Skip to content
OpenAdvisories

Vendor

Fire-Boltt

2 known vulnerabilities.

Products

BSW013 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-109571

    Fire-Boltt BSW013 firmware through V0.0.8 Unauthenticated Heart Rate Disclosure via BLE

    Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer's…

    Fire-Boltt BSW013
  • Medium 4.3
    CVE-2026-109570

    Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection

    Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft co…

    Fire-Boltt BSW013