CVE-2006-1367, dubbed a "Blueline" attack, affects Motorola PEBL U6 and V600 phones, potentially others, by allowing remote attackers to gain AT level access and view phonebook entries and SMS messages. The vulnerability stems from the Headset Audio Gateway service not requiring pairing, enabling an attacker to connect via Bluetooth channel 3. While user-assisted, a GUI misrepresentation issue allows attackers to spoof messages, tricking users into granting access. This vulnerability has a CVSS score of 6.8, indicating moderate severity with network access, medium attack complexity, and partial impact on confidentiality, integrity, and availability. Although not actively exploited (no KEV entry), a proof-of-concept exploit (EDB-27454) exists, but there is no evidence of Metasploit or Nuclei modules, and it has received minimal community or media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
u6_08.83.76rCPE matchmatch criteria | cpe:2.3:h:motorola:pebl_u6:u6_08.83.76r:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:h:motorola:v600:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.