Devices supporting Bluetooth BR/EDR and LE using CTKD are vulnerable to key overwrite

ronjor · Sep 9, 2020

Vulnerability Note VU#589825
Original Release Date: 2020-09-09 | Last Revised: 2020-09-09

Overview
Devices supporting both Bluetooth BR/EDR and LE using Cross-Transport Key Derivation (CTKD) for pairing are vulnerable to key overwrite, which enables an attacker to to gain additional access to profiles or services that are not restricted by reducing the encryption key strength or overwriting an authenticated key with an unauthenticated key. This vulnerability is being referred to as BLURtooth.
Click to expand...

Log in or Sign up

Devices supporting Bluetooth BR/EDR and LE using CTKD are vulnerable to key overwrite

ronjor Global Moderator

Log in or Sign up

Devices supporting Bluetooth BR/EDR and LE using CTKD are vulnerable to key overwrite

ronjor Global Moderator

Useful Searches