Loading vulnerability…
BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices transmit sensitive information over Bluetooth Low Energy (BLE) without encryption. The BLE packets also lack authentication and integrity protection, making the data susceptible to interception and manipulation by nearby attackers.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
This repository demonstrates a proof-of-concept exploit for CVE-2024-34463, targeting the BPL Smart Weighing Scale PWS-01-BT. The exploit leverages insufficient security in the device's Bluetooth LE communication, allowing an attacker within range to intercept and decode sensitive data (such as weight readings) broadcasted by the scale. The repository contains a C program (scanner.c) that scans for BLE advertisements and prints out the raw data, and a Python script (run.py) that parses this data to extract and display the weight. The README provides setup and usage instructions. No authentication or pairing is required to obtain the data, highlighting the privacy risk. The exploit is a proof-of-concept and does not weaponize the vulnerability beyond data extraction.
No public activity tracked yet. Mallory keeps watching.
No public activity observed for this vulnerability.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.