BC
Product
Bluetooth Core Specification
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add Bluetooth Core Specification to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25837 | 7.5 | Dec 12 | Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when… Affected: 1.1b through 5.3 |
| CVE-2022-25836 | 7.5 | Dec 12 | Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent… Affected: 4.0 through 5.3 |
| CVE-2020-26556 | 7.5 | May 24 | Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue… Affected: 1.0b through 5.2 |
| CVE-2023-24023 | 6.8 | Nov 28 | Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that… Affected: 4.2 through 5.4 |
| CVE-2020-15802 | 5.9 | Sep 11 | Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth Affected: before 5.1 |
| CVE-2020-26555 | 5.4 | May 24 | Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to… Affected: 1.1b through 5.2 |
| CVE-2021-31615 | 5.3 | Jun 25 | Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window… Affected: 4.0 through 5.2 |
| CVE-2022-24695 | 4.3 | Jun 2 | Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode Affected: through 5.3 |
| CVE-2020-35473 | 4.3 | Nov 8 | An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in… Affected: 4.0 through 5.2 |
| CVE-2020-26558 | 4.2 | May 24 | Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing… Affected: 2.1 through 5.2 |
Showing 10