Texas Instruments SimpleLink CC13XX CC26XX SDK Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK version 7.41.00.17. The issue arises during the authentication and connection phase, where attackers can send a crafted LL_Pause_Enc_Req packet, disrupting the normal process and causing a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing disruptions in the authentication and connection process.

Reproduction

To reproduce this vulnerability, send a crafted LL_Pause_Enc_Req packet during the authentication and connection phase. This can be done using a Bluetooth Low Energy (BLE) testing tool or script that allows for the manipulation of BLE packets. The targeted device should be running Texas Instruments SimpleLink CC13XX CC26XX SDK version 7.41.00.17.