CVE-2005-4417

published 2005-12-20

CVE-2005-4417: The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM…

Priority P3 37 medium 6.4 CVSS 2.0

AV N AC L Au N C P I P A N

EXPLOIT

The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote attackers to send arbitrary audio and possibly eavesdrop using the microphone via the Hands Free Audio Gateway and Headset profile.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
anycom	blue_usb-130-250_software	—	—
belkin	bluetooth_software	—	—
widcomm	bluetooth_for_windows	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.