Read the docs

Bluetooth

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Bluetooth records in CISA KEV

No Bluetooth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bluetooth Core Specification 10 records LOW Mesh Profile 4 records MEDIUM Bluetooth Core 2 records LOW Bluetooth Stack 1 record MEDIUM

Records

4 records in Mesh Profile · all components

TI-2020-16193 CVE-2020-26559 · GHSA-wfh5-x68w-hvw2

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a…

Priority MEDIUM 40

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the c…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00859 Published 2021-05-24 Will not fix CWE-863
TI-2020-16194 CVE-2020-26560 · GHSA-8qgh-c754-3crv

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a…

Priority LOW 37

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue,…

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00862 Published 2021-05-24 Will not fix CWE-863
TI-2020-16190 CVE-2020-26556 · GHSA-69j7-838h-x496

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device…

Priority LOW 35

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out,…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00914 Published 2021-05-24 Will not fix CWE-307
TI-2020-16191 CVE-2020-26557 · GHSA-gprg-wq36-vj82

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device…

Priority LOW 34

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute-force attack (unless…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00835 Published 2021-05-24 Will not fix CWE-287
Open these records in search →