Description
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
Published: 2026-10-12
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: Phishing via spoofed notifications
Action: Patch Firmware
AI Analysis

Impact

Fire‑Boltt BSW013 smartwatch firmware V0.0.8 contains a missing authentication flaw that lets an unpaired Bluetooth device write to a proprietary BLE command characteristic; by replaying commands protected only by a CRC‑16/ARC checksum an attacker can force the watch to vibrate and display fabricated alert text, enabling phishing attempts by tricking users into believing a legitimate notification.

Affected Systems

The affected product is Fire‑Boltt BSW013 smartwatch firmware through version 0.0.8. No other versions or products were listed as impacted.

Risk and Exploitability

The vulnerability has a CVSS score of 5.3, indicating medium severity, and its EPSS score is not available; it is not listed in CISA KEV. The attack vector is likely a Bluetooth‑range interaction, requiring an attacker to be within proximity to the device and to send crafted BLE packets. No privileged system access is required, and the impact is confined to unauthorized notification injection, which can be leveraged for phishing but does not provide full device control.

Generated by OpenCVE AI on October 12, 2026 at 22:43 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the Fire‑Boltt BSW013 firmware to a version that includes authentication for the BLE command characteristic.
  • Disable BLE advertisements and notifications if a firmware update cannot be applied, preventing unpaired devices from sending commands.
  • Configure the smartwatch to operate in non‑discoverable mode and reject connections from unpaired devices, limiting exposure to nearby attackers.

Generated by OpenCVE AI on October 12, 2026 at 22:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 12 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
Title Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-12T20:55:22.392Z

Reserved: 2026-10-12T19:27:54.701Z

Link: CVE-2026-109570

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-12T21:17:13.810

Modified: 2026-10-12T21:17:13.810

Link: CVE-2026-109570

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T22:45:16Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function