CVE-2016-10702 Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application's flash storage, and access an arbitrary application's JavaScript instance, by mod...
MediumCVSS 6.1
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application's flash storage, and access an arbitrary application's JavaScript instance, by modifying a UUID value within the header of a crafted application binary.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pebble firmware | <= 4.3 | No fix listed |
References
- blog.fletchto99.com third-party-advisory