ºÚÁÏÕýÄÜÁ¿

On November 1, 2021, researchers publicly released a BrakTooth proof-of-concept (PoC) tool to test Bluetooth-enabled devices against potential Bluetooth exploits using the researcher’s software tools. BrakTooth, originally disclosed in August 2021, is a family of security vulnerabilities in commercial Bluetooth stacks. An attacker could exploit BrakTooth vulnerabilities to cause a range of effects from denial-of-service to arbitrary code execution.

Health-ISAC previously distributed a regarding the breadth and criticality of the BrakTooth vulnerabilities as it affects over 1400 products, potentially impacting billions of devices.

CISA encourages manufacturers, vendors, and developers to review and update vulnerable Bluetooth System-on-a-Chip (SoC) applications or apply appropriate workarounds.