Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specifications 2.1 through 5.3 may permit an unauthenticated man-in-the-middle attacker to identify the Passkey used during pairing by reflection of a crafted public key with the same X coordinate as the offered public key and by reflection of the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. This is a related issue to CVE-2020-26558.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bluetooth Core Specification 安全漏洞
Vulnerability Description
Bluetooth Core Specification是Bluetooth的一个规范。定义了开发人员用来创建构成蓬勃发展的蓝牙生态系统的可互操作设备的技术构建块。由蓝牙特别兴趣小组（SIG）监督，并由蓝牙SIG工作组 定期更新和增强，以满足不断发展的技术和市场需求。 Bluetooth Core Specification 2.1版本至5.4版本存在安全漏洞，该漏洞源于可能会允许未经身份验证的中间人攻击，允许攻击者使用配对会话中的正确密钥完成与响应设备的身份验证配对。
CVSS Information
N/A
Vulnerability Type
N/A