Unauthenticated Notification Injection Vulnerability in Fire-Boltt BSW013 Smartwatch
CVE-2026-109570

5.3MEDIUM

Key Information:

Vendor

Fire-boltt

Status
Bsw013
Vendor
CVE Published:
12 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-109570?

The Fire-Boltt BSW013 smartwatch firmware, specifically version V0.0.8, is vulnerable to a missing authentication issue that allows attackers within Bluetooth range to inject notifications. This is achieved by exploiting the proprietary BLE command characteristic, which is secured only by a CRC-16/ARC checksum. As a result, unpaired attackers can remotely trigger watch vibrations and display misleading alert messages, potentially leading to phishing attempts and other malicious activities. Users of this device should take caution and apply any available security updates.

Affected Version(s)

BSW013 0

References

https://github.com/Pratham-16/fireboltt-Bsw013-BLE-vuln
technical-descriptionexploit
https://www.vulncheck.com/advisories/fire-boltt-bsw013-th...
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pratham A Gowda
.