{"id":138600,"date":"2025-07-01T23:11:55","date_gmt":"2025-07-01T21:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha"},"modified":"2025-07-01T23:11:55","modified_gmt":"2025-07-01T21:11:55","slug":"ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha","title":{"rendered":"Atac\u0103 prin c\u0103\u0219tile Bluetooth Sony, Marshall \u0219i Beyerdynamic cu cipuri Airoha","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La dispozitivele Bluetooth care folosesc SoC de la Airoha Systems au fost identificate vulnerabilit\u0103\u021bi care permit preluarea controlului asupra dispozitivului prin trimiterea de date special formate prin Bluetooth Classic sau BLE (Bluetooth Low Energy). Atacul poate fi efectuat f\u0103r\u0103 autentificare \u0219i f\u0103r\u0103 asociere prealabil\u0103, av\u00e2nd dispozitivul \u021bint\u0103 \u00een raza de acoperire a semnalului Bluetooth (aproximativ 10 metri). Vulnerabilit\u0103\u021bile afecteaz\u0103 unele modele de c\u0103\u0219ti wireless, difuzoare \u0219i microfoane de la Sony, Marshall, Beyerdynamic \u0219i companii mai pu\u021bin cunoscute.    <\/p>\n<p>Cercet\u0103torii care au descoperit vulnerabilitatea au reu\u0219it s\u0103 preg\u0103teasc\u0103 un prototip de instrumentar care permite citirea \u0219i scrierea de date \u00een mod remote \u00een memoria RAM \u0219i Flash prin Bluetooth. \u00cen practic\u0103, ob\u021binerea accesului complet la memoria c\u0103\u0219tilor poate fi folosit\u0103 pentru a ataca smartphone-ul asociat al utilizatorului. \u00cen special, se men\u021bioneaz\u0103 c\u0103 prin interac\u021biunea c\u0103\u0219tilor cu smartphone-ul se poate ob\u021bine acces la con\u021binutul agendei telefonice, se pot extrage istoricul apelurilor, se pot efectua apeluri \u0219i se pot asculta conversa\u021biile sau sunetele captate de microfon.     <\/p>\n<p>Pentru interac\u021biunea cu smartphone-ul, c\u0103\u0219tile compromise utilizeaz\u0103 capacit\u0103\u021bile profilului Bluetooth HFP (Hands-Free Profile), care permite trimiterea de comenzi c\u0103tre smartphone. Din cauza complexit\u0103\u021bii exploat\u0103rii vulnerabilit\u0103\u021bilor, se poate presupune c\u0103 problemele vor fi solicitate pentru a efectua atacuri \u021bintite asupra unor persoane specifice, nu pentru a fi folosite pe scar\u0103 larg\u0103 \u00eempotriva utilizatorilor obi\u0219nui\u021bi. Problema este c\u0103 instrumentarul pentru efectuarea atacului trebuie s\u0103 fie implementat pentru fiecare model de c\u0103\u0219ti \u00een parte, deoarece este necesar s\u0103 se \u021bin\u0103 cont de diferen\u021bele de configurare a memoriei \u00een fiecare firmware.      <\/p>\n<p>Atacul este posibil datorit\u0103 descoperirii a trei vulnerabilit\u0103\u021bi \u00een stiva Bluetooth Airoha. Vulnerabilit\u0103\u021bile CVE-2025-20700 \u0219i CVE-2025-20701 permit stabilirea unei conexiuni cu Bluetooth BR\/EDR (Bluetooth Classic) \u0219i serviciile GATT (Bluetooth Low Energy) f\u0103r\u0103 a trece prin procesul de autentificare, iar vulnerabilitatea CVE-2025-20702 permite utilizarea unui protocol extins specific pentru SoC Airoha pentru manipularea dispozitivului. Cercet\u0103torii au descoperit c\u0103 protocolul extins de service, printre altele, permite citirea \u0219i scrierea de date \u00een RAM \u0219i Flash, fiind disponibil f\u0103r\u0103 asocierea dispozitivelor prin BLE GATT sau Bluetooth Classic RFCOMM.     <\/p>\n<p>Informa\u021biile despre vulnerabilit\u0103\u021bi au fost trimise companiei Airoha pe 25 martie, dar r\u0103spunsul a fost ob\u021binut abia pe 27 mai dup\u0103 mai multe \u00eencerc\u0103ri de a contacta Airoha \u0219i implicarea unor produc\u0103tori de dispozitive. Pe 4 iunie, compania Airoha a \u00eenceput distribuirea unui SDK actualizat c\u0103tre produc\u0103tori, care include func\u021bionalit\u0103\u021bi pentru blocarea vulnerabilit\u0103\u021bilor. La sf\u00e2r\u0219itul lunii iunie, dup\u0103 expirarea celor 90 de zile de la trimiterea informa\u021biilor despre problem\u0103, cercet\u0103torii au publicat informa\u021bii generale despre vulnerabilit\u0103\u021bi, dar au decis s\u0103 nu dezv\u0103luie detalii legate de protocolul problematic, pentru a oferi produc\u0103torilor mai mult timp pentru distribuirea actualiz\u0103rilor de firmware.            <\/p>\n<p>Dispozitivele \u00een care au fost confirmate vulnerabilit\u0103\u021bile discutate sunt:    <\/p>\n<ul>\n<li class=\"l\">   Beyerdynamic Amiron 300;\n<li class=\"l\">  Bose QuietComfort Earbuds;\n<li class=\"l\">  EarisMax Bluetooth Auracast Sender;\n<li class=\"l\">  Jabra Elite 8 Active;\n<li class=\"l\">  JBL Endurance Race 2, JBL Live Buds 3;\n<li class=\"l\">  Jlab Epic Air Sport ANC;\n<li class=\"l\">  Marshall ACTON III, MAJOR V, MINOR IV, MOTIF II, STANMORE III, WOBURN III;\n<li class=\"l\">  MoerLabs EchoBeatz;\n<li class=\"l\"> Sony CH-720N, Link Buds S, ULT Wear, WF-1000XM3\/4\/5, WF-C500, WF-C510-GFP, WH-1000XM4\/5\/6, WH-CH520, WH-XB910N, WI-C100;\n<li class=\"l\"> Teufel Tatws2.  <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63507\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 SoC \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Airoha Systems, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e Bluetooth Classic \u0438\u043b\u0438 BLE (Bluetooth Low Energy). \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0437\u043e\u043d\u0435 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0433\u043d\u0430\u043b\u0430 Bluetooth (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 10 \u043c\u0435\u0442\u0440\u043e\u0432). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138600","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 SoC \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Airoha Systems, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e Bluetooth Classic \u0438\u043b\u0438 BLE.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 Bluetooth-\u043d\u0430\u0443\u0448\u043d\u0438\u043a\u0438 Sony, Marshall \u0438 Beyerdynamic \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 Airoha | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 SoC \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Airoha Systems, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e Bluetooth Classic \u0438\u043b\u0438 BLE.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-07-01T21:11:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-07-01T21:11:55+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atac prin c\u0103\u0219ti Bluetooth Sony, Marshall \u0219i Beyerdynamic pe cipuri Airoha | ProHoster","description":"\u00cen dispozitivele Bluetooth care folosesc SoC de la Airoha Systems, au fost identificate vulnerabilit\u0103\u021bi care permit preluarea controlului asupra dispozitivului prin trimiterea de date formatate special prin Bluetooth Classic sau BLE.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 Bluetooth-\u043d\u0430\u0443\u0448\u043d\u0438\u043a\u0438 Sony, Marshall \u0438 Beyerdynamic \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 Airoha | ProHoster","og:description":"\u0412 Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 SoC \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Airoha Systems, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e Bluetooth Classic \u0438\u043b\u0438 BLE.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-01T21:11:55+00:00","article:modified_time":"2025-07-01T21:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138600","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 13:36:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:36:20","updated":"2026-01-23 13:36:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/138600","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=138600"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/138600\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=138600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=138600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=138600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}