BL
Vendor
Bluetooth
17
CVEs
0
On KEV
0
New 30D
Products
BC7.5
Bluetooth Core Specification
Bluetooth
10 CVEs0 on KEV0 new
MP8.8
Mesh Profile
Bluetooth
4 CVEs0 on KEV0 new
BC6.3
Bluetooth Core
Bluetooth
2 CVEs0 on KEV0 new
BS8.8
Bluetooth Stack
Bluetooth
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-24023 | BC Bluetooth Core Specification Bluetooth | 6.8 | Nov 28 | Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that… |
| CVE-2022-24695 | BC Bluetooth Core Specification Bluetooth | 4.3 | Jun 2 | Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode |
| CVE-2022-25837 | BC Bluetooth Core Specification Bluetooth | 7.5 | Dec 12 | Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when… |
| CVE-2022-25836 | BC Bluetooth Core Specification Bluetooth | 7.5 | Dec 12 | Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent… |
| CVE-2020-35473 | BC Bluetooth Core Specification Bluetooth | 4.3 | Nov 8 | An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in… |
| CVE-2021-31615 | BC Bluetooth Core Specification Bluetooth | 5.3 | Jun 25 | Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window… |
| CVE-2020-26560 | MP Mesh Profile Bluetooth | 8.1 | May 24 | Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete… |
| CVE-2020-26559 | MP Mesh Profile Bluetooth | 8.8 | May 24 | Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used… |
| CVE-2020-26558 | BC Bluetooth Core Specification Bluetooth | 4.2 | May 24 | Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing… |
| CVE-2020-26557 | MP Mesh Profile Bluetooth | 7.5 | May 24 | Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the… |
| CVE-2020-26556 | BC Bluetooth Core Specification Bluetooth | 7.5 | May 24 | Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue… |
| CVE-2020-26555 | BC Bluetooth Core Specification Bluetooth | 5.4 | May 24 | Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to… |
| CVE-2020-15802 | BC Bluetooth Core Specification Bluetooth | 5.9 | Sep 11 | Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth |
| CVE-2020-10135 | BC Bluetooth Core Bluetooth | 5.4 | May 19 | Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication… |
| CVE-2020-10134 | BC Bluetooth Core Bluetooth | 6.3 | May 19 | Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated… |
| CVE-2011-1265 | BS Bluetooth Stack Bluetooth | 8.8 | Jul 13 | The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or… |