What’s Vulnerable › Vulnerabilities

CVE-2021-31613

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-07 · updated 2026-06-17

Description

The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP packet during the LMP auto rate procedure, allowing attackers in radio range to immediately crash (and restart) a device via a crafted LMP packet.

Affected products

• Zh-Jieli Ac6901 Firmware: all versions
• Zh-Jieli Ac6921 Firmware: all versions
• Zh-Jieli Ac6925 Firmware: all versions
• Zh-Jieli Ac6926 Firmware: all versions
• Zh-Jieli Ac6928 Firmware: all versions

References

• http://www.zh-jieli.com/product/68-cn.html
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
• https://launchstudio.bluetooth.com/ListingDetails/19746
• https://launchstudio.bluetooth.com/ListingDetails/58628
• http://www.zh-jieli.com/product/68-cn.html
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
• https://launchstudio.bluetooth.com/ListingDetails/19746
• https://launchstudio.bluetooth.com/ListingDetails/58628

Get alerted when CVE-2021-31613 or the next vulnerability affects your stack