CVE Catalog
CVE-2023-34761
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.47%
37th percentile - higher than 37% of all known CVEs
Summary
An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter.
Risk Assessment
An attacker could exploit this vulnerability to send inappropriate content, potentially harming the brand's reputation and putting users at risk.
Recommendation
It is recommended to update the application to the latest version and implement additional security measures to restrict access to the device.
Original NVD description (English source)
An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter.