DeutschShown in its original language — a full translation is planned for a future version.
Bluetooth: Mehrere Schwachstellen
view advisory published 2021-05-24
Ein lokaler Angreifer kann mehrere Schwachstellen im Bluetooth Standard ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-26560US | high8.1OT elevated | — | ||
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentic… | ||||
| CVE-2020-26559US | high8.8OT elevated | — | ||
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given… | ||||
| CVE-2020-26558US | medium4.2 | — | ||
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (i… | ||||
| CVE-2020-26557US | high7.5OT elevated | — | ||
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the Au… | ||||
| CVE-2020-26556US | high7.5 | — | ||
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue befo… | ||||
| CVE-2020-26555US | medium5.4OT elevated | — | ||
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to com… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:4432 vom 2021-11-09external
- Red Hat Security Advisory RHSA-2024:2394 vom 2024-04-30external
- Red Hat Security Advisory RHSA-2024:4352 vom 2024-07-08external
- Red Hat Security Advisory RHSA-2024:4631 vom 2024-07-18external
- Amazon Linux Security Advisory ALAS-2021-1685 vom 2021-07-16external
- Amazon Linux Security Advisory ALASKERNEL-5.10-2022-002 vom 2022-01-31external
- Amazon Linux Security Advisory ALASKERNEL-5.4-2022-004 vom 2022-01-31external
- Rocky Linux Security Advisory RLSA-2024:4352 vom 2024-07-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan