Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-26560

kernel: impersonation attack in Bluetooth Mesh Provisioning

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Bluetooth
Products
Mesh Profile
CVE-2020-26559

kernel: Authvalue leak in Bluetooth Mesh Provisioning

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Bluetooth
Products
Mesh Profile
CVE-2020-26557

kernel: predictable Authvalue in Bluetooth Mesh Provisioning Leads to MITM

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute-force attack (unless the AuthValue is sufficiently random and changed each time).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bluetooth
Products
Mesh Profile
CVE-2020-26556

kernel: malleable commitment Bluetooth Mesh Provisioning

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bluetooth
Products
Bluetooth Core Specification Mesh Profile