CVE-2026-109571

MediumCVSS 4.3

Published: 12/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer's live heart rate readings without pairing, bonding, or any confirmation on the watch.

Risk Assessment

The risk includes user privacy breach as health data can be intercepted by unauthorized individuals nearby.

Recommendation

It is recommended to update the watch firmware to the latest version and disable BLE functionality if not necessary.

Other vulnerabilities in Fire-Boltt BSW013

CVE-2026-109570Medium
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS