WL18XX-BT-SP: How to fix CVE-2018-5383 on a Nucleus system

Christian Langbein

Part Number: WL18XX-BT-SP

From other posts, I have seen that there is a BT Classic service pack and also a Linux BLE stack update to fix the vulnerability.

However, we are using the WL1833Q chipset with a Jacinto device running Mentor Nucleus OS. As far as I have understood, there is no stack update for Nucleus available, is that correct?

We could still use the latest service pack. But would that fix the vulnerability? in general, or only for BT Classic?

over 3 years ago

0 Hari Nagalla over 3 years ago

TI__Mastermind 27080 points

Can, please you mention with security vulnerability you are referring to?

Thanks

0 Christian Langbein over 3 years ago in reply to Hari Nagalla

Prodigy 40 points

Sorry I forgot to mention it in the text, my question is referring to the vulnerability in the headline: CVE-2018-5383

Thanks

0 Hari Nagalla over 3 years ago in reply to Christian Langbein

TI__Mastermind 27080 points

Please check the below e2e thread and take the recommended/fixed WL8 BT service pack.

e2e.ti.com/.../831349

Thanks

0 Christian Langbein over 3 years ago in reply to Hari Nagalla

Prodigy 40 points

Our customer needs an official statement on how to fix CVE-2018-5383.

Could you please confirm that the mentioned Bluetooth service pack will fix the WL1833Q vulnerability CVE-2018-5383.in both Bluetooth Classic and Bluetooth Low-Energy without the need for a Nucleus Bluetopia Bluetooth stack update.

Thanks

0 Hari Nagalla over 3 years ago in reply to Christian Langbein

TI__Mastermind 27080 points

This vulnerability is related to validation of elliptical curve parameters in secure simple pairing and LE secure connections. Fix in the security manager of the Stack is needed..

Please, check the below threads -

https://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/712618?CC2640R2F-security-threat-CVE-2018-5383

Thanks

Hari

0 Christian Langbein over 3 years ago in reply to Hari Nagalla

Prodigy 40 points

Thank you for the clarification.

Other wireless

Other wireless technologies forum

WL18XX-BT-SP: How to fix CVE-2018-5383 on a Nucleus system