Lucene search

K
osvGoogleOSV:ASB-A-174886838
HistoryJun 01, 2021 - 12:00 a.m.

Bluetooth security notice: (VU#799380.8 TLP:AMBER)

2021-06-0100:00:00
Google
osv.dev
18

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.6%

In smp_process_pairing_public_key of smp_act.cc, there is a possible interception of Bluetooth pairing from an on-path attacker due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
:unknown:eq11
:unknown:eq10
:unknown:eq8.1
:unknown:eq9