CVE-2020-10135

Description

Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key.

Weakness classification

• CWE-290: Authentication Bypass by Spoofing
• CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Primary references

• cret@cert.org — Broken Link, Mailing List, Third Party Advisory
• cret@cert.org — Broken Link, Mailing List, Third Party Advisory
• cret@cert.org — Third Party Advisory, VDB Entry
• cret@cert.org — Exploit, Mailing List, Third Party Advisory
• cret@cert.org — Third Party Advisory
• cret@cert.org — Third Party Advisory, US Government Resource
• cret@cert.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory