IoT & Hardware
Denial of Service
Denial of service (Device Crashing) on Fastrack reflex 2.0 activity tracker
Fuzzing characteristic value leads to Device crash It was identified Fuzzing char value last 3 bytes of the watch was getting crashed after 5 minutes it restarts, Bluetooth doesn’t work and doesn’t…
.png)
Overview
Fuzzing characteristic value leads to Device crash
It was identified Fuzzing char value last 3 bytes of the watch was getting crashed after 5 minutes it restarts, Bluetooth doesn’t work and doesn’t show in the network, and attacker can crash the watch and make unusable.
Vulnerability details
Fuzzing characteristic value leads to Device crash It was identified Fuzzing char value last 3 bytes of the watch was getting crashed after 5 minutes it restarts, Bluetooth doesn’t work and doesn’t show in the network, and attacker can crash the watch and
Disclosure timeline
2020-11-17 reported to the vendor
2021-06-30 No response from the vendor and moving forward to public disclosure.
References
Credits
Shakir Zari
Related Advisories
jscript.dll - ActiveXObject BSTR - Use After Free
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability
Opera Mini Location Permission Spoof
Concerned about a similar issue in your product?
Payatu's researchers find these vulnerabilities before attackers do. Talk to us about product, firmware and IoT security testing.
