EasySetup Implicit Intent Vulnerability: Exposing Bluetooth Address in Versions Prior to 11.1.13

CVE-2023-42555 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device.

Learn more about our User Device Pen Test.