mendesgeo

12 vulnerabilities were found across different BLE software development kits (SDKs) of six major system-on-a-chip (SoC) vendors. The vulnerabilities expose flaws in specific BLE SoC implementations that allow an attacker in radio range to trigger deadlocks, crashes and buffer overflow or completely bypass security depending on the circumstances.

The researchers also made available the proof of concept code on their GitHub repository: https://github.com/Matheus-Garbelini/sweyntooth_bluetooth_lo...

hahaha, this is not a backdoor. It's just logical implementation flaws. If wifi products had good certification, this things wouldn't happen.

The silicon vendor Espressif has already patched the last firmware (SDK) of such devices. However, other products that uses this chips with still have to patch against it.

yes, what was discovered is that no matter what master key was exchanged after the radius authentication, the attacker can still hijack the device.

Multi-physical layer communication protocol also could be the best way to describe it in one word.