Rewterz Threat Advisory – CVE-2018-16986 – Fortinet FortiAP BLE Stack Memory Corruption Vulnerability

Severity

Medium

Analysis Summary

Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.

Impact

• System access
• Denial of Service

Affected Vendors

Fortinet

Affected Products

Fortinet FortiAP

Remediation

Update to version 5.6.4 or 6.0.4.