CVE-2021-3658

2022-03-0222:11:05

CWE-863

redhat

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

bluetoothd from bluez incorrectly saves adapters’ Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

CNA Affected

[
  {
    "product": "bluez",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixedin - 5.61 and above."
      }
    ]
  }
]