Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Bluetooth Component: Bluetooth Core Specification Clear all filters
TI-2022-09406 CVE-2022-25837 · GHSA-gcxw-4wrx-xhw5

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an…

Priority LOW 35

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure…

CVSS 3.1HIGH 7.5 Adjacent network No auth User interaction EPSS 0.00366 Published 2022-12-12 No fix listed CWE-294
TI-2022-09405 CVE-2022-25836 · GHSA-399c-6449-xhh6

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may…

Priority LOW 35

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when the MITM negotiates Legacy Passk…

CVSS 3.1HIGH 7.5 Adjacent network No auth User interaction EPSS 0.00366 Published 2022-12-12 No fix listed CWE-294
TI-2020-17999 CVE-2020-35473 · GHSA-qw9m-cx2j-p94f

An information leakage vulnerability in the Bluetooth Low Energy advertisement scan…

Priority LOW 20

An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specifications 5.0 through 5.2,…

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00394 Published 2022-11-08 No fix listed CWE-294
TI-2021-11713 CVE-2021-31615 · GHSA-m25v-4656-g8pc

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0…

Priority LOW 24

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the trans…

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00405 Published 2021-06-25 No fix listed CWE-362
TI-2020-16189 CVE-2020-26555 · GHSA-6vq6-ghrc-jpjw

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2…

Priority LOW 26

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the P…

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00887 Published 2021-05-24 Partial fix CWE-863
TI-2020-16190 CVE-2020-26556 · GHSA-69j7-838h-x496

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device…

Priority LOW 35

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out,…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00914 Published 2021-05-24 Will not fix CWE-307
TI-2020-16192 CVE-2020-26558 · GHSA-7g33-jchx-2fjc

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2…

Priority LOW 21

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure)…

CVSS 3.1MEDIUM 4.2 Adjacent network No auth No interaction EPSS 0.00879 Published 2021-05-24 Partial fix CWE-287