New Bluetooth KNOB Flaw Lets Attackers Manipulate Connections

guest · Aug 13, 2019

New Bluetooth KNOB Flaw Lets Attackers Manipulate Connections
August 13, 2019
https://www.bleepingcomputer.com/ne...b-flaw-lets-attackers-manipulate-connections/

A new Bluetooth vulnerability named "KNOB" has been disclosed that allow attackers to more easily brute force the encryption key used during pairing to monitor or manipulate the data transferred between two paired devices.

In a coordinated disclosure between Center for IT-Security, Privacy and Accountability (CISPA), ICASI, and ICASI members such as Microsoft, Apple, Intel, Cisco, and Amazon, a new vulnerability called "KNOB" has been disclosed that affects Bluetooth BR/EDR devices, otherwise known as Bluetooth Classic, using specification versions 1.0 - 5.1.

This flaw has been assigned CVE ID CVE-2019-9506 [...]
The researchers identified that it is possible for an attacking device to interfere with the procedure used to set up encryption on a BR/EDR connection between two devices in such a way as to reduce the length of the encryption key used," stated an advisory on Bluetooth.com.
Click to expand...

guest · Aug 14, 2019

Bluetooth BR/EDR supported devices are vulnerable to key negotiation attacks
Vulnerability Note VU#918987
August 14, 2019
https://www.kb.cert.org/vuls/id/918987/

Overview
The encryption key length negotiation process in Bluetooth BR/EDR Core v5.1 and earlier is vulnerable to packet injection by an unauthenticated, adjacent attacker that could result in information disclosure and/or escalation of privileges. This can be achieved using an attack referred to as the Key Negotiation of Bluetooth (KNOB) attack, which is when a third party forces two or more victims to agree on an encryption key with as little as one byte of entropy. Once the entropy is reduced, the attacker can brute-force the encryption key and use it to decrypt communications.
Impact
An unauthenticated, adjacent attacker can force two Bluetooth devices to use as low as 1 byte of entropy. This would make it easier for an attacker to brute force as it reduces the total number of possible keys to try, and would give them the ability to decrypt all of the traffic between the devices during that session.
Solution
Bluetooth host and controller suppliers should refer to the Bluetooth SIG's "Expedited Errata Correction 11838" for guidance on updating their products. Downstream vendors should refer to their suppliers for updates.
Click to expand...

Minimalist · Aug 24, 2019

Here’s why it’s highly unlikely your Bluetooth headphones will be hacked

Based purely on the content of these statements, you might think that Bluetooth has suddenly become a wide-open door on your devices, through which anyone with ill intent could walk and cause irreparable harm, or steal all of your personal info. But the truth is that while these newly discovered threats are real, the odds of your Bluetooth devices being hacked are low — and lower still if you’re only using Bluetooth with your headphones. Here’s what’s really going on.
Click to expand...

https://www.digitaltrends.com/home-theater/why-your-bluetooth-headphones-wont-be-hacked/

Minimalist · Sep 15, 2019

Could Your Bluetooth Devices Be Hacked in 2019?

Bluetooth is everywhere, and so are its security flaws. But how great is the risk? How concerned should you be about Bluejacking, Bluesnarfing, or Bluebugging? Here’s what you need to know to protect your devices.
Click to expand...

https://www.howtogeek.com/438712/could-your-bluetooth-devices-be-hacked-in-2019/

Log in or Sign up

New Bluetooth KNOB Flaw Lets Attackers Manipulate Connections

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Log in or Sign up

New Bluetooth KNOB Flaw Lets Attackers Manipulate Connections

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Useful Searches