Controller firmware update

BR/EDR

BLE

Bluetooth devices should provide firmware update capabilities for their controller or driver components. Bugs or security vulnerabilities may arise in the controller firmware, and the only viable method to correct them is through firmware updates.

For this reason, incorporating a controller firmware update mechanism is essential. Without it, any discovered flaw would be impossible to remediate without physically recalling or replacing all deployed devices.

Description

The procedure consists on verifying that there is in place any update mechanism to update controller firmware in the device under study.

Each manufacturer may choose to include different proprietary mechanisms.

This control is considered satisfactory when it is verified that the device supports remote firmware updates.

To check this control, the following resources may be useful:

ID Description
BSAM-RES-04 Bluetooth connections sniffing
BSAM-RES-05 Capture of a Bluetooth connection