CVE-2026-109570
Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.
| CWE | CWE-306 |
| Vendor | fire-boltt |
| Product | bsw013 |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for fire-boltt bsw013
Be the first to know when new medium vulnerabilities affecting fire-boltt bsw013 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
Fire-Boltt / BSW013
0 ≤ V0.0.8
References
Credits
Pratham A Gowda