NetSight
IP …
high8.8Public exploit code

CVE-2020-12351

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.7.7 before 4.9.240
from 4.10 before 4.14.202
from 4.15 before 4.19.152
from 4.20 before 5.4.72
from 5.5 before 5.8.16
Version 5.9.0

Weakness classification

CWE-20

References