Skip to content
JBL
Products
| Product | CVEs | Exploited | Latest |
|---|
| Boombox 2 | 1 | – | Dec 10, 2025 |
| Boombox 3 | 1 | – | Dec 10, 2025 |
| Flip 5 | 1 | – | Dec 10, 2025 |
| Flip 6 | 1 | – | Dec 10, 2025 |
| LIVE PRO 2 TWS | 1 | – | Dec 10, 2025 |
| Pulse 4 | 1 | – | Dec 10, 2025 |
| Pulse 5 | 1 | – | Dec 10, 2025 |
| soundbar multibeam | 1 | – | Jul 30, 2023 |
| TUNE FLEX | 1 | – | Dec 10, 2025 |
| Xtreme 3 | 1 | – | Dec 10, 2025 |
Exploited and recent CVEs
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2105
Medium 6.5
JBL: Improper validation of ICM field in connection requests
0.2%
-
CVE-2024-2104
High 8.8
JBL: Improper BLE security configurations and lack of authentication on the device's GATT server
0.2%
-
CVE-2024-2104
High 8.8
JBL: Improper BLE security configurations and lack of authentication on the device's GATT server
0.2%
-
CVE-2023-37215
Medium 6.2
JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials
0.4%