{"id":138600,"date":"2025-07-01T23:11:55","date_gmt":"2025-07-01T21:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha"},"modified":"2025-07-01T23:11:55","modified_gmt":"2025-07-01T21:11:55","slug":"ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-cherez-bluetooth-naushniki-sony-marshall-i-beyerdynamic-na-chipah-airoha","title":{"rendered":"Sulmi p\u00ebrmes kufjeve Bluetooth Sony, Marshall dhe Beyerdynamic me \u00e7ipa Airoha","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb paisjet Bluetooth q\u00eb p\u00ebrdorin SoC nga kompania Airoha Systems jan\u00eb identifikuar vulnerabilitete q\u00eb lejojn\u00eb marrjen e kontrollit mbi pajisjen p\u00ebrmes d\u00ebrgimit t\u00eb t\u00eb dh\u00ebnave t\u00eb strukturuara posa\u00e7\u00ebrisht p\u00ebrmes Bluetooth Classic ose BLE (Bluetooth Low Energy). Sulmi mund t\u00eb kryhet pa autentifikim dhe pa lidhje t\u00eb m\u00ebparshme, p\u00ebrsa koh\u00eb pajisja e viktim\u00ebs ndodhet brenda arritjes s\u00eb sinjalit Bluetooth (rreth 10 metra). Vulnerabilitetet prekin disa modele t\u00eb kufjeve pa tel, kolonave dhe mikrofonave nga Sony, Marshall, Beyerdynamic dhe kompani m\u00eb pak t\u00eb njohura. <\/p>\n

K\u00ebrkuesit q\u00eb zbuluan vulnerabilitetin arrit\u00ebn t\u00eb p\u00ebrgatisin nj\u00eb prototip t\u00eb mjeteve q\u00eb lejojn\u00eb t\u00eb lexojn\u00eb dhe shkruajn\u00eb t\u00eb dh\u00ebna n\u00eb memorien e p\u00ebrkohshme dhe Flash p\u00ebrmes Bluetooth. N\u00eb praktik\u00eb, marrja e aksesit t\u00eb plot\u00eb n\u00eb memorien e kufjeve mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb sulmuar telefonin e lidhur me kufjet e p\u00ebrdoruesit. N\u00eb ve\u00e7anti, p\u00ebrmendet se p\u00ebrmes nd\u00ebrveprimit t\u00eb kufjeve me telefonin mund t\u00eb arrihet n\u00eb p\u00ebrmbajtjen e adresar\u00ebve, t\u00eb nxirren historit\u00eb e thirrjeve, t\u00eb b\u00ebhen thirrje dhe t\u00eb d\u00ebgjohen bisedat ose tingujt e kapur nga mikrofoni. <\/p>\n

P\u00ebr nd\u00ebrveprimin me telefonin nga kufjet e komprometuara p\u00ebrdoren mund\u00ebsit\u00eb e profilit Bluetooth HFP (Hands-Free Profile), q\u00eb lejon d\u00ebrgimin e komandave n\u00eb telefon. P\u00ebr shkak t\u00eb kompleksitetit t\u00eb shfryt\u00ebzimit t\u00eb vulnerabiliteteve, mund t\u00eb supozohet se k\u00ebto probleme do t\u00eb ishin t\u00eb k\u00ebrkuara p\u00ebr kryerjen e sulmeve t\u00eb synuara ndaj individ\u00ebve t\u00eb ve\u00e7ant\u00eb, e jo p\u00ebr p\u00ebrdorim masiv ndaj p\u00ebrdoruesve t\u00eb zakonsh\u00ebm. Problemi \u00ebsht\u00eb se mjetet p\u00ebr kryerjen e sulmit duhet t\u00eb realizohen p\u00ebr \u00e7do model t\u00eb ve\u00e7ant\u00eb t\u00eb kufjeve, pasi \u00ebsht\u00eb e nevojshme t\u00eb merret parasysh ndryshimet e memorie n\u00eb \u00e7do version t\u00eb programit. <\/p>\n

Kryerja e sulmit \u00ebsht\u00eb e mundur fal\u00eb identifikimit t\u00eb tre vulnerabiliteteve n\u00eb stekun Bluetooth t\u00eb Airoha. Vulnerabilitetet CVE-2025-20700 dhe CVE-2025-20701 lejojn\u00eb krijimin e nj\u00eb kanali komunikimi me Bluetooth BR\/EDR (Bluetooth Classic) dhe sh\u00ebrbimet GATT (Bluetooth Low Energy) pa kaluar autentifikimin, nd\u00ebrsa vulnerabiliteti CVE-2025-20702 lejon p\u00ebrdorimin e nj\u00eb protokolli t\u00eb avancuar specifik p\u00ebr SoC Airoha p\u00ebr manipulimin e pajisjeve. K\u00ebrkuesit zbuluan se protokolli i sh\u00ebrbimit t\u00eb avancuar, nd\u00ebr t\u00eb tjera lejon q\u00eb t\u00eb lexohen dhe shkruhen t\u00eb dh\u00ebna n\u00eb RAM dhe Flash, \u00ebsht\u00eb i aksesuesh\u00ebm pa lidhje mes pajisjeve p\u00ebrmes BLE GATT ose Bluetooth Classic RFCOMM. <\/p>\n

Informacioni mbi ekzistenc\u00ebn e vulnerabiliteteve iu d\u00ebrgua kompanis\u00eb Airoha m\u00eb 25 mars, por p\u00ebrgjigjja u mor vet\u00ebm m\u00eb 27 maj pas disa p\u00ebrpjekjesh t\u00eb p\u00ebrs\u00ebritura p\u00ebr t'u lidhur me Airoha dhe angazhimit t\u00eb disa prodhuesve t\u00eb pajisjeve n\u00eb k\u00ebt\u00eb proces. M\u00eb 4 qershor, kompania Airoha nisi shp\u00ebrndarjen e nj\u00eb SDK t\u00eb p\u00ebrdit\u00ebsuar p\u00ebr prodhuesit, duke p\u00ebrfshir\u00eb mund\u00ebsi p\u00ebr t\u00eb bllokuar vulnerabilitetet. N\u00eb fund t\u00eb qershorit, pas skadimit t\u00eb 90 dit\u00ebve nga momenti i d\u00ebrgimit t\u00eb informacionit mbi problematik\u00ebn, k\u00ebrkuesit publikuan informacione t\u00eb p\u00ebrgjithshme mbi vulnerabilitetet, por vendos\u00ebn t\u00eb mos zbulojn\u00eb akoma detaje n\u00eb lidhje me protokollin problematik, p\u00ebr t'u dh\u00ebn\u00eb prodhuesve koh\u00eb t\u00eb mjaftueshme p\u00ebr t\u00eb shp\u00ebrndar\u00eb p\u00ebrdit\u00ebsimet e programeve t\u00eb pajisjeve. <\/p>\n

Pajisjet n\u00eb t\u00eb cilat \u00ebsht\u00eb konfirmuar pranis\u00eb e vulnerabiliteteve t\u00eb shqyrtuara: <\/p>\n