VULNERABILITY INTELLIGENCE

CVE-2019-17627

CVSS score6.5 MEDIUM

EPSS probability0.68%

CISA KEVNot currently listed

Published2019-10-16

Last modified2026-06-17

Description

The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy (BLE) traffic during one authorized unlock action, and then calculating the authentication key via simple computations on the hex digits of a valid authentication request. This a…