CVE-2024-45431

MEDIUM

OpenSynergy BlueSDK <=6.x - Improper Input Validation

Title source: llm

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID.

References (2)

Core 2

Core References

Exploit, Third Party Advisory

https://pcacybersecurity.com/resources/advisory/perfekt-blue

Product

https://www.opensynergy.com/

Scores

CVSS v3 5.3

EPSS 0.0442

EPSS Percentile 90.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (1)

opensynergy/blue_sdk < 6.0.1

Published Sep 12, 2025

Tracked Since Feb 18, 2026