Vulnerabilities > CVE-2019-16518 - Exposure of Resource to Wrong Sphere vulnerability in Vandyvape Swell KIT MOD Firmware 2.0.2

047910
CVSS 4.3 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
low complexity
vandyvape
CWE-668

Summary

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets that specify large power or voltage values.

Vulnerable Configurations

Part Description Count
OS
Vandyvape
1
Hardware
Vandyvape
1

Common Weakness Enumeration (CWE)