Over-the-air exploitation of a Silicon Labs Bluetooth Low Energy chip via CVE-2020-15531
Channel: DarkMentorLLC
Date: 2020-08-09

This demo video by Veronica Kovah of DarkMentor LLC shows the exploitation of CVE-2020-15531, a vulnerability discovered by her in the Bluetooth Low Energy code present on the following Silicon Labs chips: 
EFR32 SoCs using Bluetooth SDK v2.13.2 and earlier

This vulnerability allows for getting remote code execution on nearby devices using vulnerable Silicon Labs chips. The exploit doesn't require pairing or authentication, only proximity to a victim system. This exploit also persistently infects the controller, so that the malware survives reboots

For more information watch the full talk in this same channel, and see the associated whitepaper at https://github.com/darkmentorllc