OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security validation and make the incoming data be processed.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 12 Sep 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-705
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 12 Sep 2025 16:30:00 +0000

Type Values Removed Values Added
Description OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security validation and make the incoming data be processed.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-09-12T17:25:30.483Z

Reserved: 2024-08-29T00:00:00.000Z

Link: CVE-2024-45433

cve-icon Vulnrichment

Updated: 2025-09-12T17:25:25.234Z

cve-icon NVD

Status : Received

Published: 2025-09-12T17:15:46.827

Modified: 2025-09-12T18:15:32.907

Link: CVE-2024-45433

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.