CVE-2026-109570
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
Risk Assessment
The risk includes the possibility of conducting phishing attacks on the watch user and displaying fake notifications, potentially leading to disclosure of sensitive information.
Recommendation
It is recommended to update the watch firmware to the latest version and avoid pairing with unknown devices.
Other vulnerabilities in Fire-Boltt BSW013
Original NVD description (English source)
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS