https://whisperpair.eu/vulnerable-devices

WhisperPair

Hijacking Bluetooth Accessories Using Google Fast Pair

Back to homepage
About Cite Watch the video
Search for vulnerable accessories

Even if your device is not in this list, we recommend keeping your
device up to date to ensure it is protected against the latest
security vulnerabilities.

[                    ]

  * 
    Sonos Ace
    Sonos Inc Not vulnerable
    View details
  * 
    WH-1000XM6
    Sony Vulnerable
    View details
  * 
    Pixel Buds Pro 2
    Google Vulnerable
    View details
  * 
    ATH-M20xBT
    Audio-Technica Not vulnerable
    View details
  * 
    OnePlus Nord Buds 3 Pro
    OnePlus Electronics (Shenzhen) Co., Ltd. Vulnerable
    View details
  * 
    WH-1000XM5
    Sony Vulnerable
    View details
  * 
    WH-CH720N
    Sony Vulnerable
    View details
  * 
    WF-1000XM5
    Sony Vulnerable
    View details
  * 
    WH-1000XM4
    Sony Vulnerable
    View details
  * 
    Nothing Ear (a)
    NOTHING TECHNOLOGY LIMITED Vulnerable
    View details
  * 
    JBL TUNE BEAM
    Harman Vulnerable
    View details
  * 
    JBL Flip 6
    Harman Not vulnerable
    View details
  * 
    Redmi Buds 5 Pro
    Xiaomi Inc. Vulnerable
    View details
  * 
    MOTIF II A.N.C.
    Marshall Vulnerable
    View details
  * 
    Jabra Speak2 55 UC
    Jabra Not vulnerable
    View details
  * 
    Bose QC Ultra Headphones
    Bose Corporation Not vulnerable
    View details
  * 
    soundcore Liberty 4 NC
    Anker Vulnerable
    View details
  * 
    Jabra Elite 8 Active
    Jabra Vulnerable
    View details
  * 
    Poly VFree 60 Series
    Poly Not vulnerable
    View details
  * 
    Beosound A1 2nd Gen
    Bang & Olufsen Not vulnerable
    View details
  * 
    Beats Solo Buds
    Apple, Inc. Not vulnerable
    View details

How can I check whether my device is vulnerable?

Due to ethical considerations and the potential risk of abuse, the
WhisperPair implementation is not publicly available.

Please contact us to receive the testing harness, as we can release
it privately upon request.

This work was supported by the Flemish Government through the
Cybersecurity Research Program with grant number: VOEWICS02.