PT-2023-25005 · Hello Cup · Hello Cup
CVSS v3.1
6.5
Média
| Vetor | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Hello Cup version 1.3.1 for Android
Description
An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup and bypass the application's client-side chat censor filter.
Recommendations
For Hello Cup version 1.3.1 for Android, as a temporary workaround, consider restricting access to the chat functionality until a patch is available. Avoid using the application's chat feature in areas where unauthorized BLE connections are possible.
Exploit
Correção
Missing Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hello Cup