CVE-2026-109570— Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection
Quick assessment
Affected
Fire-Boltt BSW013
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Fire-Boltt BSW013 智能手表固件版本 V0.0.8 存在一处缺失认证漏洞，攻击者无需与设备进行配对，即可通过写入专有的 BLE 命令特征值注入通知。处于蓝牙覆盖范围内的攻击者可构造仅依靠 CRC-16/ARC 校验和保护的指令，触发手表振动并显示伪造的警报文本，从而实施网络钓鱼攻击。
Possible ATT&CK Techniques 3 AI
T1040 · Network Sniffing T1132.002 · Non-Standard Encoding T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Fire-Boltt | BSW013 | ≤ V0.0.8 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-109570
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection
Source: CVE Program / CVE List V5
Vulnerability Description
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Fire-Boltt | BSW013 | 0 ~ V0.0.8 | - |
|
II. Public POCs for CVE-2026-109570
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-109570
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-109570 (1)
Proof of Concept for CVE-2026-109570 (1)
-
🔗 GitHub - Pratham-16/fireboltt-Bsw013-BLE-vuln: Security advisory: unauthenticated BLE command injection in the Fire-Boltt BSW013 smartwatch — notification spoofing, plaintext device info disclosure, and unauthenticated live heart rate exposure (CWE-306). · GitHub Read full article technical-description exploit
IV. Related Vulnerabilities
Same weakness: CWE-306
-
CVE-2026-108473
Improper Authentication and Credential Exposure in Multiple -
CVE-2026-97793
Windows Setup and Deployment Elevation of Privilege Vulnerab -
CVE-2026-96858
Windows Security Account Manager Tampering Vulnerability -
CVE-2026-85884
Windows Health and Optimized Experiences Service Elevation o -
CVE-2026-83656
Windows Modern Device Management (MDM) Tampering Vulnerabili
V. Comments for CVE-2026-109570
No comments yet