WAGO: Bluetooth LE vulnerability in WLAN-ETHERNET-Gateway
view advisory published 2023-07-31
A vulnerability allows Bluetooth LE pairing traffic to be sniffed and used to bypass authentication for pairing.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-25836US | high7.5OT elevated | — | ||
Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent acce… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationFirmware vers:all/* installed on WAGO WLAN ETHERNET Gateway
Disable Bluetooth LE if not used.
- No fix plannedFirmware vers:all/* installed on WAGO WLAN ETHERNET Gateway
No firmware update will be released to fix this issue.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan