CVE-2018-11631

Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluetooth Low Energy (BLE) traffic.

CVSS v3.0

4.3 MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2.0

3.3 LOWAV:A/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.21% chance of exploitation in the next 30 days, 66th percentile

Published

2018-05-31

Updated

2024-09-16

Proof-of-concept exploits (1)

• ColeShelly/bandexploit2★ · 2020-08-12

References

• CVE Record
• NVD entry

Related

• CVE-2018-11628
• CVE-2018-11646
• CVE-2018-11625
• CVE-2018-11649
• CVE-2018-11615
• CVE-2018-11652