An issue in the Bluetooth RFCOMM service of the Parani M10 Motorcycle Intercom running firmware 2.1.3 permits an attacker who can transmit data over Bluetooth to send specially crafted RFCOMM frames that trigger a crash. The crash stops the intercom from functioning, effectively denying the rider the ability to communicate through the device and potentially affecting safety.

The vulnerability affects the Parani M10 Motorcycle Intercom with firmware version 2.1.3. No other vendors or products are listed in the CVE details.

The EPSS score is not provided and the vulnerability is not included in CISA’s KEV catalog, so publicly available data on exploitation frequency is lacking. The attack vector is inferred to be Bluetooth, as the description references crafted RFCOMM frames; thus an attacker would need to be in Bluetooth range to send the malicious frames. No other prerequisites or conditions are specified in the description, and the impact can be achieved solely by sending the crafted frames. The lack of an announced exploit means the immediate risk is uncertain, but devices running the vulnerable firmware remain at risk until a fix is applied.