CVE-2026-109570

4.3Medium

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

4.3Medium

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Limited impact
Weakness: CWE-306

Impact

Nearby attackers can inject spoofed alert text and vibrate the watch for phishing attacks. They only need to be within Bluetooth range without prior pairing or authentication.

Root cause

The smartwatch's proprietary BLE command characteristic accepts unauthenticated write commands protected only by an insecure CRC-16/ARC checksum.

Affected systems

Fire-Boltt BSW013 smartwatch firmware through V0.0.8

CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Fix & remediation

No fixed version is specified in the advisory; disable Bluetooth on the watch or power it off in untrusted environments to prevent injection.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109570