TI-2023-18848 CVE-2023-37215 · GHSA-982x-m668-9g65
JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials
Priority MEDIUM 42
JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials
JBL
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
JBL records in CISA KEVNo JBL vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-01955 CVE-2024-2104 · GHSA-7gpp-6qj6-mpxg
JBL: Improper BLE security configurations and lack of authentication on the device's GATT server
Priority MEDIUM 40
Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusabl…
TI-2021-16147 CVE-2021-38548 · GHSA-gw6g-fvjm-97c4
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from…
Priority LOW 29
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack.
TI-2021-09386 CVE-2021-28155 · GHSA-hw39-2f47-g9hg
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle…
Priority LOW 29
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown…
TI-2024-01956 CVE-2024-2105 · GHSA-6238-89rc-fwrc
JBL: Improper validation of ICM field in connection requests
Priority LOW 28
An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.