Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-5014 EUVD-2019-14621GHSA-rvfv-gfcw-5592

An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2…

Published May 8, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Winco Firefly Winco Fireworks FireFly FW-1007 V2.0 —

References