NetSight
IP …
medium4.2

CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey u…

Impact

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.

Affected products

VendorProductAffected versions
BluetoothBluetooth Core Specification
from 2.1 through 5.2
FedoraprojectFedora
Version 34
DebianDebian Linux
Version 9.0
LinuxLinux Kernel
before 5.13
IntelAx210 Firmware
All versions
IntelAx201 Firmware
All versions
IntelAx200 Firmware
All versions
IntelAc 9560 Firmware
All versions
IntelAc 9462 Firmware
All versions
IntelAc 9461 Firmware
All versions
IntelAc 9260 Firmware
All versions
IntelAc 8265 Firmware
All versions

Weakness classification

CWE-287

References