CVE-2024-2104

CVE-2024-2104CVE-2024-2104

Description

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Last modified2026-11-08
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.