CVE-2019-5014

An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability.

Score

CVSS 3.1 6.5 Medium

Status

Modified - talos-cna@cisco.com

Published

2019-05-08

Last modified

2024-08-04

Weaknesses

CWE-284, CWE-306

Affected products

• Fw-1007 Firmware (Wincofireworks)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0772