Lucene search

Huawei TechnologiesHUAWEI-SA-20200805-01-BLUETOOTH

HistoryAug 05, 2020 - 12:00 a.m.

Security Advisory - Improper Authentication Vulnerability in Bluetooth Affect Several Huawei Products

2020-08-0500:00:00

Huawei Technologies

www.huawei.com

162

4.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

46.6%

JSON

There is an improper authentication vulnerability in Bluetooth affect several Huawei products. Legacy pairing and secure-connections pairing authentication in Bluetooth® BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. (Vulnerability ID: HWPSIRT-2020-04109)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-10135.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-bluetooth-en

Affected configurations

Vulners

Node

huaweiares-al00bRange<9.1.0.165

huaweiares-al10dRange<9.1.0.165

huaweicolumbia-al10bRange<9.1.0.333

huaweicolumbia-al10iRange<9.1.0.335

huaweicolumbia-l29dRange<9.1.0.352

huaweicolumbia-l29dRange<9.1.0.355

huaweicornell-al00indRange<9.1.0.336

huaweicornell-tl10bRange<9.1.0.336

huaweidura-tl00bRange<1.0.0.190

huaweidura-tl00aRange<1.0.0.184

huaweidura-tl00bRange<1.0.0.182

huaweihonor_20Range<9.1.0.149

huaweihonor_20Range<9.1.0.170

huaweihonor_20Range<9.1.0.171

huaweihonor_20Range<9.1.0.172

huaweimate_s_firmwareRange<10.0.0.185

huaweimate_9_proRange<10.0.0.180

huaweimate_9_proRange<10.0.0.187

huaweimate_s_firmwareRange<10.0.0.185

huaweihuawei_p30Range<10.0.0.168

huaweihuawei_p30Range<10.0.0.173

huaweihuawei_p30Range<10.0.0.178

huaweihuawei_p30Range<10.0.0.187

huaweihuawei_p30Range<10.0.0.185

huaweihuawei_y5_2018Range<1.0.0.148

huaweihuawei_nova_3Range<9.1.0.336

huaweihuawei_nova_4Range<10.0.0.160

huaweihonor_7s\,honor_7aRange<1.0.0.149

huaweihonor_view_20Range<9.1.0.257

huaweihonor_view_20Range<9.1.0.260

huaweikatyusha-al10aRange<9.1.0.156

huaweilaya-al00epRange<10.0.0.185

huaweiparis-al00icRange<9.1.0.349

huaweiprinceton-al10dRange<9.1.0.248

huaweiprinceton-tl10cRange<10.0.0.189

huaweisydney-l21Range<9.1.0.221

huaweisydneym-l01Range<9.1.0.233

huaweitony-al00bRange<10.0.0.189

huaweitony-tl00bRange<10.0.0.189

huaweiyale-l61cRange<9.1.0.179

huaweiyale-al50aRange<9.1.1.158

huaweiyale-l21aRange<9.1.0.170

huaweiyale-l21aRange<9.1.0.171

huaweiyale-l21aRange<9.1.0.172

huaweiyale-l61aRange<10.0.0.197

huaweiyale-tl00bRange<9.1.0.179

huaweiyalep-al10bRange<9.1.0.179

CPENameOperatorVersion
ares-al00blt9.1.0.165
ares-al10dlt9.1.0.165
columbia-al10blt9.1.0.333
columbia-al10ilt9.1.0.335
columbia-l29dlt9.1.0.352
columbia-l29dlt9.1.0.355
cornell-al00indlt9.1.0.336
cornell-tl10blt9.1.0.336
dura-al00alt1.0.0.190
dura-tl00alt1.0.0.184

Name	Operator	Version
ares-al00b	lt	9.1.0.165
ares-al10d	lt	9.1.0.165
columbia-al10b	lt	9.1.0.333
columbia-al10i	lt	9.1.0.335
columbia-l29d	lt	9.1.0.352
columbia-l29d	lt	9.1.0.355
cornell-al00ind	lt	9.1.0.336
cornell-tl10b	lt	9.1.0.336
dura-al00a	lt	1.0.0.190
dura-tl00a	lt	1.0.0.184