TI-2023-09808 Aliases CVE-2023-24023 GHSA-4rvq-6825-fp99

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in…

LOW 35Published 2023-11-28 · Updated 2024-08-02

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · None
Fix status: Partial Red Hat: 9 fixed, 3 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01287 70th percentileScored 2026-11-07

Fix Partial Red Hat: 3 advisoriesRed Hat: 9 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPE	Versions	Role	Vendor
cpe:2.3:a:bluetooth:bluetooth_core_specification::::::::	4.2 – 5.4	Vulnerable	Bluetooth
cpe:2.3:o:microsoft:windows_10_1809::::::::	before 10.0.17763.5122	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_21h2::::::::	before 10.0.19043.3693	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_22h2::::::::	before 10.0.19045.3693	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11_21h2::::::::	before 10.0.22000.2600	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11_22h2::::::::	before 10.0.22621.2715	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_11_23h2::::::::	before 10.0.22631.2715	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2019::::::::	before 10.0.17763.5122	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2022::::::::	before 10.0.20348.2113	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::	before 10.0.25398.531	Vulnerable	Microsoft

cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:* Versions 4.2 – 5.4 Vulnerable ·Bluetooth
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* Versions before 10.0.17763.5122 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* Versions before 10.0.19043.3693 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* Versions before 10.0.19045.3693 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* Versions before 10.0.22000.2600 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* Versions before 10.0.22621.2715 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* Versions before 10.0.22631.2715 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* Versions before 10.0.17763.5122 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* Versions before 10.0.20348.2113 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* Versions before 10.0.25398.531 Vulnerable ·Microsoft

Remediation

Red Hat 3 advisories

RHSA-2024:2950 Released 2024-05-22 · Red Hat rating Moderate
kernel-rt security and bug fix update
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.rt7.342.el8_10, kernel-rt-core-4.18.0-553.rt7.342.el8_10, kernel-rt-debug-4.18.0-553.rt7.342.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.rt7.342.el8_10, kernel-rt-core-4.18.0-553.rt7.342.el8_10, kernel-rt-debug-4.18.0-553.rt7.342.el8_10 +7
RHSA-2024:3138 Released 2024-05-22 · Red Hat rating Moderate
kernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.el8_10, kernel-4.18.0-553.el8_10, kernel-abi-stablelists-4.18.0-553.el8_10 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.el8_10
RHSA-2024:2394 Released 2024-04-30 · Red Hat rating Important
kernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-427.13.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.13.1.el9_4, kernel-64k-devel-5.14.0-427.13.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.3.0-427.13.1.el9_4, kernel-5.14.0-427.13.1.el9_4, kernel-64k-5.14.0-427.13.1.el9_4 +29
- Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-427.13.1.el9_4, libperf-5.14.0-427.13.1.el9_4
- Red Hat Enterprise Linux NFV (v. 9) kernel-rt-5.14.0-427.13.1.el9_4, kernel-rt-core-5.14.0-427.13.1.el9_4, kernel-rt-debug-5.14.0-427.13.1.el9_4 +11
- Red Hat Enterprise Linux RT (v. 9) kernel-rt-5.14.0-427.13.1.el9_4, kernel-rt-core-5.14.0-427.13.1.el9_4, kernel-rt-debug-5.14.0-427.13.1.el9_4 +9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 7	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 9	Affected	No fix yet
Red Hat Enterprise Linux AppStream (v. 9)	Fixed	RHSA-2024:2394
Red Hat Enterprise Linux BaseOS (v. 8)	Fixed	RHSA-2024:3138
Red Hat Enterprise Linux BaseOS (v. 9)	Fixed	RHSA-2024:2394
Red Hat Enterprise Linux CRB (v. 8)	Fixed	RHSA-2024:3138
Red Hat Enterprise Linux CRB (v. 9)	Fixed	RHSA-2024:2394
Red Hat Enterprise Linux NFV (v. 8)	Fixed	RHSA-2024:2950
Red Hat Enterprise Linux NFV (v. 9)	Fixed	RHSA-2024:2394
Red Hat Enterprise Linux RT (v. 8)	Fixed	RHSA-2024:2950
Red Hat Enterprise Linux RT (v. 9)	Fixed	RHSA-2024:2394

Timeline

2026-10-02 Threatist record created from CVE-2023-24023
2026-10-03 Alias added: GHSA-4rvq-6825-fp99

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences