CVE-2024-45431

MEDIUM 5.3CVE-2024-45431 · Published 12/09/2025 · updated 27/10/2026

In short

CVE-2024-45431 is a MEDIUM (CVSS 5.3) vulnerability affecting blue sdk (opensynergy).
Chance of exploitation in the next 30 days (EPSS): 5.6%, higher than 92.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
blue sdk opensynergy	`≤ 6.0.1`	No fix yet

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID.

References

pcacybersecurity.com/resources/advisory/perfekt-blue · Exploit
opensynergy.com · Product

More vulnerabilities in blue sdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

blue sdk

opensynergy

≤ 6.0.1

No fix yet

Description

More vulnerabilities in blue sdk

See all →