Where to report dialog security vulnerability?

⚠️
Hi there.. thanks for coming to the forums. Exciting news! we’re now in the process of moving to our new forum platform that will offer better functionality and is contained within the main Dialog website. All posts and accounts have been migrated. We’re now accepting traffic on the new forum only - please POST any new threads at//www.wsdof.com/support. We’ll be fixing bugs / optimising the searching and tagging over the coming days.
5 posts / 0 new
Last post
Tue, 2019-10-01 08:18
#1
mgarbelix@gmail.com
Offline
Last seen:11 months 2 weeks ago
Joined:2019-08-07 05:37
Where to report dialog security vulnerability?

Hi, I need to report a vulnerability that I've found in Dialog's SDK, but it seems dialog doesn't have a PSIRT contact to receive vulnerability reports.

有推荐联系电子邮件从对话框t吗o report vulnerability details? Would sending technical details tosmartbond@diasemi.combe the correct email?

Thanks.

Device:
DA1468x
Tue, 2019-10-01 17:10
PM_Dialog
Offline
Last seen:4 days 8 hours ago
Staff
Joined:2018-02-08 11:03
Hello,

Hello,

Can you please post online which are your queries or issues regarding the vulnerability? You can post technical questions on our forum. In the meanwhile, please take a look at the following announcement:

https://support.dialog-semiconductor.com/forums/post/announcements-and-updates/bluetooth-sig-security-vulnerability

Also, can you please indicate the chip that you are using?

Thanks, PM_Dialog

Tue, 2019-10-01 20:58
(Reply to #2)
mgarbelix@gmail.com
Offline
Last seen:11 months 2 weeks ago
Joined:2019-08-07 05:37
Hello, the DoS vulnerability

Hello, the DoS vulnerability in question was found in Dialog BLE Link Layer implementation. I'm using the latest SDK for DA14680-01 (DA14681-01A9DEVKT-B evaluation kit).

Let me know if it's still ok to post the full details here and PoC tool. As I'm aware, commercial products uses this SoC and that would mean public disclosure for attackers in radio range.

Thanks.

Wed, 2019-10-02 15:51
PM_Dialog
Offline
Last seen:4 days 8 hours ago
Staff
Joined:2018-02-08 11:03
Hi mgarbelix@gmail.com,

Himgarbelix@gmail.com,

You can send in this email address:bluetooth.support@diasemi.com

Thanks, PM_Dialog

Accepted answer
Tue, 2019-10-08 09:04
mgarbelix@gmail.com
Offline
Last seen:11 months 2 weeks ago
Joined:2019-08-07 05:37
Thanks, the report has been

Thanks, the report has been sent to the correct email as requested.