VULNERABILITY INTELLIGENCE

CVE-2005-2547

CVSS score7.5 HIGH
EPSS probability2.40%
CISA KEVNot currently listed
Published2005-08-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.

Primary references