Highly reviewed speaker can be hacked over the air to infect connected devices

In a startling revelation, a widely praised soundbar, the Sound Blaster Katana V2X from Singapore-based Creative Technologies, has been found to have a significant security flaw. This vulnerability could potentially allow hackers to execute remote code simply by being within Bluetooth range of the speaker. The Katana V2X, which retails for $280 and has garnered numerous accolades for its impressive audio quality, was the subject of an unexpected discovery by researcher Rasmus Moorats. After acquiring the speaker, Moorats aimed to develop a Linux tool to communicate with it. However, he stumbled upon a critical security oversight when he realized he could connect his Bluetooth device to the speaker—linked to a PC via USB—without any form of authentication or prior pairing. This connection was made possible through a proprietary protocol known as CTP, which stands for Creative Transport Protocol. CTP facilitates command exchanges between connected devices, enabling functions like LED color changes and equalizer adjustments. Most alarmingly, one command within this protocol permits users to upload new firmware to the device, allowing for the replacement of the original firmware without any protective measures like code signing. This incident raises significant concerns about the security practices in consumer electronics, highlighting the need for manufacturers to implement stricter safeguards against unauthorized access and firmware modifications. As Bluetooth technology becomes increasingly integrated into our daily devices, the implications of such vulnerabilities cannot be overlooked.