Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-26559

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue.

Published

2021-05-24T18:15:07.960

Last Modified

2024-11-21T05:20:04.907

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

6.5

Impact Score

6.4

Weaknesses

Type: Primary
CWE-863

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	bluetooth	mesh_profile	1.0.0	Yes
Application	bluetooth	mesh_profile	1.0.1	Yes

References

https://kb.cert.org/vuls/id/799380 Third Party Advisory, US Government Resource ([email protected])
https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ Vendor Advisory ([email protected])
https://kb.cert.org/vuls/id/799380 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)