Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable

ronjor · May 18, 2020

Original Release Date: 2020-05-18 | Last Revised: 2020-05-18

Overview
Bluetooth Low Energy (BLE) and Basic Rate / Enhanced Data Rate (BR/EDR) Core Configurations are used for low-power short-range communications. To establish an encrypted connection, two Bluetooth devices must pair with each other using an agreed upon Association Model. It is possible for an unauthenticated, adjacent attacker to man-in-the-middle (MITM) attack the pairing process and force each victim device into a different Association Model, possibly granting the attacker the ability to initiate any Bluetooth operation on either attacked device.
Solution
Bluetooth host and controller suppliers should refer to the Bluetooth SIG's statement for guidance on updating their products. Downstream vendors should refer to their suppliers for updates.
Click to expand...

Log in or Sign up

Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable

ronjor Global Moderator

Log in or Sign up

Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable

ronjor Global Moderator

Useful Searches