Log in Start free

Vulnerability · Published May 19, 2020 · Assigned by certcc

CVE-2020-10135Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks

Medium 5.4

In plain English

A medium-severity security flaw in BR/EDR from Bluetooth. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)2.4%top 16.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC

Official description

Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2020-10135
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2020-10135
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2020-10135

Affected products (as reported)

VendorProductVersions
Bluetooth BR/EDR 5.2 – through 5.2

Weakness: CWE-757 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References