hbsa-2025-0002
MEDIUM CVSS 6.5 csaf_harmaninternational
Description
The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet.
Timeline
- Published
- 2025-12-10 07:00 UTC
- Last Modified
- 2025-12-10
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE",
"summary": "coordinating",
"urls": [
"https://certvde.com"
]
},
{
"names": [
"Mattar Bernhard"
],
"organization": "Hummus Sec",
"summary": "reporting"
}
],
"aggregate_severity": {
"namespace": "https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"text": "6.5 (Medium)"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "en-GB",
"notes": [
{
"category": "summary",
"text": "The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet. ",
"title": "Summary"
},
{
"category": "description",
"text": "Sending an invalid connection request to a JBL Bluetooth Speaker causes it to crash or enter a deadlock state, halting music playback and disconnecting existing connections. Recovery requires manual reboot by the user, as reconnection is impossible in this state. ",
"title": "Impact"
},
{
"category": "description",
"text": "No remediation is available as of now. A manual reboot of the device by the user is required to restore functionality.",
"title": "Remediation"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productsecurity@harman.com",
"name": "Harman International",
"namespace": "https://www.harman.com"
},
"references": [
{
"category": "external",
"summary": "CERT@VDE Security Advisories for Harman",
"url": "https://certvde.com/en/advisories/vendor/harmann/"
},
{
"category": "self",
"summary": "HBSA-2025-0002: BLE ICM Vulnerability in JBL Headphones - HTML",
"url": "https://certvde.com/en/advisories/VDE-2025-089"
},
{
"category": "self",
"summary": "HBSA-2025-0002: BLE ICM Vulnerability in JBL Headphones - CSAF",
"url": "https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2025/hbsa-2025-0002.json"
}
],
"title": "BLE ICM Vulnerability in JBL Headphones",
"tracking": {
"aliases": [
"VDE-2025-089"
],
"current_release_date": "2025-12-10T07:00:00.000Z",
"generator": {
"date": "2025-12-08T12:02:07.922Z",
"engine": {
"name": "Secvisogram",
"version": "2.5.40"
}
},
"id": "HBSA-2025-0002",
"initial_release_date": "2025-12-10T07:00:00.000Z",
"revision_history": [
{
"date": "2025-12-10T07:00:00.000Z",
"number": "1.0.0",
"summary": "Initial version"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Flip 5",
"product": {
"name": "JBL Flip 5",
"product_id": "CSAFPID-1101",
"product_identification_helper": {
"skus": [
"050036359160",
"050036359177",
"050036359184",
"050036359191",
"050036359207",
"050036359214",
"050036359221",
"050036359238",
"050036359245",
"050036359252",
"050036359276",
"050036359283",
"050036359290",
"050036359290",
"050036359306",
"050036359313",
"050036359320",
"050036359337",
"050036359344",
"050036359351",
"050036359481",
"050036359498",
"050036361088",
"050036367738",
"050036367745",
"050036367752",
"050036367769",
"050036367776",
"050036367783",
"050036367790",
"050036367806",
"050036367813",
"050036367820",
"050036367837",
"050036370325",
"050036370332",
"050036370349",
"050036370356",
"050036372053",
"050036372060",
"050036376020",
"050036377379",
"050036377386",
"050036377393",
"050036386289",
"050036397346",
"050036397346",
"1200130001710",
"1200130004018",
"1200130004018",
"1200130005343",
"4968929055777",
"4968929055784",
"4968929055791",
"4968929055807",
"4968929055814",
"4968929055821",
"4968929055838",
"4968929055845",
"4968929055852",
"4968929055869",
"4968929055999",
"4968929068555",
"6925281954566",
"6925281954573",
"6925281954573",
"6925281954580",
"6925281954580",
"6925281954597",
"6925281954597",
"6925281954603",
"6925281954610",
"6925281954627",
"6925281954634",
"6925281954641",
"6925281954658",
"6925281954672",
"6925281954689",
"6925281954696",
"6925281954702",
"6925281954719",
"6925281954726",
"6925281954733",
"6925281954740",
"6925281954757",
"6925281954894",
"6925281954900",
"6925281971037",
"6925281971044",
"6925281973406",
"6925281973703",
"6925281973727",
"6925281973789",
"6925281973796",
"6925281973802",
"6925281973819",
"6925281973826",
"6925281973833",
"6925281977695",
"6925281985607",
"6925281997709",
"7896359562787",
"7896359562794",
"7896359562800",
"7896359562817",
"7896359562824"
]
}
}
},
{
"category": "product_name",
"name": "Flip 6",
"product": {
"name": "JBL Flip 6",
"product_id": "CSAFPID-1102",
"product_identification_helper": {
"skus": [
"050036384315",
"050036384315",
"050036384322",
"050036384322",
"050036384339",
"050036384339",
"050036384346",
"050036384346",
"050036384353",
"050036384360",
"050036384377",
"050036384384",
"050036384391",
"050036384407",
"050036384414",
"050036384421",
"050036384438",
"050036384445",
"050036384452",
"050036384469",
"050036384476",
"050036384483",
"050036385220",
"050036386784",
"050036386807",
"050036392501",
"050036392556",
"050036392563",
"050036392679",
"050036392808",
"1200130001413",
"4968929214204",
"4968929214211",
"4968929214228",
"4968929214235",
"4968929214242",
"4968929214266",
"4968929214273",
"4968929214280",
"6925281942662",
"6925281992971",
"6925281992971",
"6925281992988",
"6925281992995",
"6925281992995",
"6925281993008",
"6925281993015",
"6925281993039",
"6925281993046",
"6925281993053",
"6925281993077",
"6925281993107",
"6925281993138",
"6925281993145",
"6925281994258",
"6925281995163",
"6925281995170",
"6925281995217",
"6925281995224",
"6925281995767"
]
}
}
},
{
"category": "product_name",
"name": "Pulse 4",
"product": {
"name": "JBL Pulse 4",
"product_id": "CSAFPID-1103",
"product_identification_helper": {
"skus": [
"050036362320",
"050036370608",
"050036362306",
"050036362290",
"050036370615",
"050036362313",
"6925281958342",
"7896359564729",
"6925281958328",
"6925281958311",
"6925281974533",
"6925281958335",
"6925281973772",
"4968929056897",
"4968929056880"
]
}
}
},
{
"category": "product_name",
"name": "Pulse 5",
"product": {
"name": "JBL Pulse 5",
"product_id": "CSAFPID-1104",
"product_identification_helper": {
"skus": [
"50036389693",
"50036389730",
"50036393683",
"4968929215959",
"6925281900969",
"6925281967849",
"6925281999574"
]
}
}
},
{
"category": "product_name",
"name": "Boombox 2",
"product": {
"name": "JBL Boombox 2",
"product_id": "CSAFPID-1105",
"product_identification_helper": {
"skus": [
"050036368674",
"050036368681",
"050036368698",
"050036368704",
"050036368711",
"050036368728",
"050036368728",
"050036368735",
"050036368742",
"050036368759",
"050036368766",
"050036368773",
"050036368780",
"050036368797",
"050036368803",
"050036376006",
"050036376013",
"050036381024",
"050036381031",
"4968929059614",
"4968929059621",
"6925281967955",
"6925281967962",
"6925281967979",
"6925281967986",
"6925281967993",
"6925281968006",
"6925281968006",
"6925281968013",
"6925281968037",
"6925281968051",
"6925281968051",
"6925281968068",
"6925281968075",
"6925281968082",
"6925281968112",
"6925281968112",
"6925281968129",
"6925281980701",
"6925281983702",
"6925281983719",
"6925281985058",
"6925281996177",
"6925281997716",
"7896359566044",
"7896359568185",
"9346112023348"
]
}
}
},
{
"category": "product_name",
"name": "Boombox 3",
"product": {
"name": "JBL Boombox 3",
"product_id": "CSAFPID-1106",
"product_identification_helper": {
"skus": [
"050036389075",
"050036389082",
"050036389099",
"050036389105",
"050036392815",
"4968929215423",
"4968929215430",
"50036389099",
"50036389105",
"50036389112",
"50036389129",
"50036389136",
"50036389143",
"50036389150",
"50036389167",
"50036389174",
"50036389174",
"50036389181",
"50036389181",
"50036389198",
"50036389204",
"50036389211",
"50036389228",
"50036389235",
"50036389242",
"50036392983",
"6925281975578",
"6925281975684",
"6925281977916",
"6925281977923",
"6925281998744",
"6925281998751",
"6925281998768",
"6925281998768",
"6925281998775",
"6925281998775",
"6925281998782",
"6925281998799",
"6925281998805",
"6925281998812",
"6925281998829",
"6925281998836",
"6925281998843",
"6925281998843",
"6925281998843",
"6925281998850",
"6925281998850",
"6925281998850",
"6925281998867",
"6925281998874",
"6925281998881",
"6925281998898",
"6925281998904",
"6925281998911",
"9346112036607"
]
}
}
},
{
"category": "product_name",
"name": "Xtreme 3",
"product": {
"name": "JBL Xtreme 3",
"product_id": "CSAFPID-1107",
"product_identification_helper": {
"skus": [
"050036375115",
"050036375054",
"050036375061",
"050036375078",
"050036375085",
"050036375092",
"050036375108",
"050036375115",
"050036375122",
"050036375139",
"050036375146",
"050036375153",
"050036375160",
"050036375177",
"050036375184",
"050036375191",
"050036375207",
"050036375214",
"050036375221",
"050036375238",
"050036375245",
"050036375252",
"050036375269",
"050036375276",
"050036375283",
"050036376907",
"050036376914",
"050036376921",
"050036381826",
"050036381833",
"050036381840",
"050036381857",
"050036386302",
"050036386319",
"050036386326",
"4968929078424",
"4968929078431",
"4968929078448",
"6925281977459",
"6925281977466",
"6925281977473",
"6925281977480",
"6925281977497",
"6925281977503",
"6925281977510",
"6925281977527",
"6925281977534",
"6925281977541",
"6925281977558",
"6925281977565",
"6925281977572",
"6925281977589",
"6925281977596",
"6925281977602",
"6925281977602",
"6925281977619",
"6925281977619",
"6925281977626",
"6925281977633",
"6925281977640",
"6925281977657",
"6925281977664",
"6925281977671",
"6925281977688",
"6925281984945",
"6925281984952",
"6925281984969",
"6925281984976",
"6925281989858",
"6925281989865",
"6925281991080",
"6925281992575",
"6925281994326",
"6925281999994",
"7896359567355",
"7896359567362",
"9346112016715",
"9346112030964"
]
}
}
}
],
"category": "vendor",
"name": "JBL"
}
],
"product_groups": [
{
"group_id": "CSAFGID-0001",
"product_ids": [
"CSAFPID-1101",
"CSAFPID-1102",
"CSAFPID-1103",
"CSAFPID-1104",
"CSAFPID-1105",
"CSAFPID-1106",
"CSAFPID-1107"
],
"summary": "Affected products."
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mattar Bernhard"
],
"organization": "Hummus Sec",
"summary": "reporting"
}
],
"cve": "CVE-2024-2105",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2023-08-10T10:00:00.000Z",
"notes": [
{
"audience": "all",
"category": "general",
"text": "An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.",
"title": "Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1101",
"CSAFPID-1102",
"CSAFPID-1103",
"CSAFPID-1104",
"CSAFPID-1105",
"CSAFPID-1106",
"CSAFPID-1107"
]
},
"release_date": "2024-03-01T11:00:00.000Z",
"remediations": [
{
"category": "none_available",
"date": "2025-07-01T10:00:00.000Z",
"details": "No fix available",
"group_ids": [
"CSAFGID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalScore": 6.5,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 6.5,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1101",
"CSAFPID-1102",
"CSAFPID-1103",
"CSAFPID-1104",
"CSAFPID-1105",
"CSAFPID-1106",
"CSAFPID-1107"
]
}
],
"title": "JBL: Improper validation of ICM field in connection requests"
}
]
}