CVE-2026-109570: Missing Authentication for Critical Function in Fire-Boltt BSW013
Description
Fire-Boltt BSW013 smartwatch firmware versions up to 0.0.8 have a missing authentication vulnerability that allows attackers within Bluetooth range to inject notifications. This is due to the ability to write to a proprietary BLE command characteristic protected only by a CRC-16/ARC checksum, enabling unpaired attackers to vibrate the watch and display spoofed alert text. The vulnerability has a medium severity score of 5.3 CVSS 4.0.
CVSS v4.0
Score 5.3medium
Affected software
Fire-Boltt
BSW013
pkg:github/pratham-16/fireboltt-Bsw013-BLE-vulnRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-109570 describes a missing authentication vulnerability in Fire-Boltt BSW013 smartwatch firmware through version 0.0.8. Unpaired attackers within Bluetooth range can exploit this flaw by sending crafted commands to a proprietary BLE characteristic that is only protected by a CRC-16/ARC checksum, which does not provide cryptographic authentication. This allows attackers to inject notifications that cause the watch to vibrate and display arbitrary alert text, potentially enabling phishing attacks via spoofed notifications.
Potential Impact
The vulnerability allows unauthenticated attackers within Bluetooth range to inject arbitrary notifications on the affected smartwatch, causing it to vibrate and display spoofed alert messages. This could be used for phishing or social engineering attacks. There is no indication of further compromise such as data theft or device control. The CVSS 4.0 base score is 5.3 (medium severity), reflecting the limited attack vector (adjacent network) and lack of privileges required.
Mitigation Recommendations
No patch or official fix is currently documented. Users should be aware of the risk of receiving spoofed notifications from unpaired devices within Bluetooth range. Avoid pairing or using the device in untrusted environments until a vendor fix is available. Monitor vendor advisories for updates regarding remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-12T19:27:54.701Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6acd4b482cdf04f656d3ef72
Added to database: 10/12/2026, 21:04:08 UTC
Last enriched: 10/12/2026, 21:19:06 UTC
Last updated: 10/12/2026, 21:19:06 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.