Fire-Boltt

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Fire-Boltt records in CISA KEV

No Fire-Boltt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dream Firmware 1 record LOW

Records

3 records

TI-2026-71300 CVE-2026-109570 · GHSA-hf79-56cq-w4qp

Fire-Boltt BSW013 smartwatch accepts unauthenticated BLE alerts

MEDIUM 57

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00258 Published 2026-10-12 No fix listed CWE-306

TI-2024-20346 CVE-2024-30656 · GHSA-p85q-w393-fg42

An issue in Fireboltt Dream Wristphone BSW202_FB_AAC_v2.0_20240110-20240110-1956 allows…

LOW 33

An issue in Fireboltt Dream Wristphone BSW202_FB_AAC_v2.0_20240110-20240110-1956 allows attackers to cause a Denial of Service (DoS) via a crafted deauth frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00438 Published 2024-04-15 No fix listed

TI-2026-71301 CVE-2026-109571 · GHSA-hj6p-cc45-4m6g

Missing authentication in Fire-Boltt BSW013 leaks heart rate over BLE

LOW 11

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37).

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00177 Published 2026-10-12 No fix listed CWE-306

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0