The Frontier X2 device exposes critical GATT characteristics over BLE without requiring authentication or authorization, allowing unauthorized attackers in proximity to manipulate device functions and induce denial-of-service conditions. The Frontier X Android application also fails to authenticate BLE devices properly, permitting attackers to impersonate legitimate Frontier X2 devices by cloning BLE advertisements and expected GATT characteristics. This enables attackers to manipulate activity states and inject false health telemetry data such as breathing rate, heart rate, and strain into the application. The vulnerability is classified as CWE-306 (Missing Authentication for Critical Function) and has a CVSS v3.1 base score of 8.8, indicating high severity. No patch or official remediation has been documented as of the publication date.

Successful exploitation allows attackers within BLE range to gain unauthorized control over the Frontier X2 device functions, including starting/stopping activities, triggering vibrations, and causing denial-of-service. Attackers can also impersonate devices to inject fabricated health telemetry data into the Frontier X Android application, potentially misleading users or systems relying on this data. The vulnerability impacts confidentiality, integrity, and availability of device and application functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit physical proximity of untrusted devices to the Frontier X2 device and exercise caution when pairing or connecting BLE devices. Monitoring for unusual device behavior or telemetry anomalies may help detect exploitation attempts, but no specific vendor-recommended mitigations are currently documented.