Hero Motocorp Vida V1 Pro Denial-of-Service Vulnerability via Bluetooth Low Energy Component

A denial-of-service vulnerability has been identified in the Hero Motocorp Vida V1 Pro application, specifically in version 2.0.7. This issue allows a local attacker to disrupt services by exploiting the Bluetooth Low Energy (BLE) component of the application.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Reproduction

The vulnerability can be reproduced by establishing an unauthenticated Bluetooth Low Energy connection to the affected device. This can be done using a local device that supports BLE, by sending specific commands or requests that overwhelm the application's ability to process them, thereby causing a denial-of-service condition.