Description
An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets that specify large power or voltage values.
Exploits (1)
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://gitlab.com/crypt0crc/cve-2019-16518
Scores
CVSS v3
4.3
EPSS
0.0008
EPSS Percentile
22.9%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Details
CWE
CWE-668
Status
published
Products (1)
vandyvape/swell_kit_mod_firmware
2.0.2
Published
Sep 23, 2019
Tracked Since
Feb 18, 2026