Dashboard / CVE-2024-45431

CVE-2024-45431

MEDIUM
MEDIUM Priority: 0.30 BB Relevance: 72/100
Published: 2025-09-12 Modified: 2026-10-27 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
opensynergy blue_sdk < 6.0.1

References & Advisories (2)

Bug Bounty Relevance

72 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

5.63%
Raw Score 0.056270
Percentile 92.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.05627
2026-10-28
0.05627

Intelligence Sources

nvd ref →

External Links