OpenCVE

An attacker with physical access to a BrilliantTS FUZE card (MCU firmware 0.1.73, BLE firmware 0.7.4) can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool.

No CVSS v4.0

No CVSS v3.1

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

AV:L/AC:L/Au:N/C:P/I:P/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Brilliantts	Fuze Card Fuze Card Ble Firmware Fuze Card Mcu Firmware

Configuration 1 [-]

AND

OR	cpe:2.3:o:brilliantts:fuze_card_ble_firmware:0.7.4:::::::*
	cpe:2.3:o:brilliantts:fuze_card_mcu_firmware:0.1.73:::::::*

cpe:2.3:h:brilliantts:fuze_card:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://blog.ice9.us/2018/04/stealing-credit-cards-from-fuze-bluetooth.html
https://ice9.us/advisories/ICE9-2018-001.txt
https://www.elttam.com/blog/fuzereview/#content
https://www.reddit.com/r/netsec/comments/89qrp1/stealing_credit_cards_from_fuze_via_bluetooth/

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-04-04T00:00:00

Updated: 2024-08-05T07:17:50.651Z

Reserved: 2018-03-28T00:00:00

Link: CVE-2018-9119

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-04-04T18:29:02.433

Modified: 2024-11-21T04:15:00.233

Link: CVE-2018-9119

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:brilliantts:fuze_card_ble_firmware:0.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "49008870-8A17-407B-BB7A-9255C1C37F14", "vulnerable": true}, {"criteria": "cpe:2.3:o:brilliantts:fuze_card_mcu_firmware:0.1.73:*:*:*:*:*:*:*", "matchCriteriaId": "68174661-F161-4B27-9536-7264A1145F74", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:brilliantts:fuze_card:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FB55F9B-14CC-4F5D-869B-AEC81F1C220E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An attacker with physical access to a BrilliantTS FUZE card (MCU firmware 0.1.73, BLE firmware 0.7.4) can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool."}, {"lang": "es", "value": "Un atacante con acceso f\u00edsico a una tarjeta BrilliantTS FUZE (MCU firmware 0.1.73, BLE firmware 0.7.4) puede desbloquear la tarjeta, extraer n\u00fameros de tarjeta de cr\u00e9dito y manipular los datos de la tarjeta mediante Bluetooth, ya que no se necesita autenticaci\u00f3n, tal y como se demuestra con gatttool."}], "id": "CVE-2018-9119", "lastModified": "2024-11-21T04:15:00.233", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 3.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 0.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-04-04T18:29:02.433", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://blog.ice9.us/2018/04/stealing-credit-cards-from-fuze-bluetooth.html"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://ice9.us/advisories/ICE9-2018-001.txt"}, {"source": "cve@mitre.org", "url": "https://www.elttam.com/blog/fuzereview/#content"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking"], "url": "https://www.reddit.com/r/netsec/comments/89qrp1/stealing_credit_cards_from_fuze_via_bluetooth/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://blog.ice9.us/2018/04/stealing-credit-cards-from-fuze-bluetooth.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://ice9.us/advisories/ICE9-2018-001.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.elttam.com/blog/fuzereview/#content"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://www.reddit.com/r/netsec/comments/89qrp1/stealing_credit_cards_from_fuze_via_bluetooth/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Primary"}]}