Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Fire-Boltt Clear all filters
TI-2026-71301 CVE-2026-109571 · GHSA-hj6p-cc45-4m6g

Missing authentication in Fire-Boltt BSW013 leaks heart rate over BLE

Priority LOW 11

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37).

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00177 Published 2026-10-12 No fix listed CWE-306
TI-2026-71300 CVE-2026-109570 · GHSA-hf79-56cq-w4qp

Fire-Boltt BSW013 smartwatch accepts unauthenticated BLE alerts

Priority MEDIUM 57

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00258 Published 2026-10-12 No fix listed CWE-306