Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

BPL Personal Weighing Scale PWS-01BT IND/09/18/599

Source

cve@mitre.org

CVE-2024-34463 details

Published : Sept. 3, 2024, 2:15 p.m.
Last Modified : Sept. 3, 2024, 3:12 p.m.

Description

BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. (The packet data also lacks authentication and integrity protection.)

CVSS Score

1	2	3	4	5.1	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-285	Improper Authorization	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

Base Score

5.1

Exploitability Score

2.5

Impact Score

2.5

Base Severity

MEDIUM

Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References

URL	Source
https://github.com/yash-chandna/CVE-2024-34463	cve@mitre.org
https://www.bplmedicaltechnologies.com/product-details/weighing-scales/personal-weighing-scale-pws-01bt/	cve@mitre.org
https://yashhchandna.medium.com/random-sunday-thought-turned-into-a-cve-09ca0c08343f	cve@mitre.org

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-34463