PT-2021-11247
CVE-2020-26557
·
تاريخ النشر
2021-05-24
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Bluetooth Mesh profile versions 1.0 and 1.0.1
Description:
The issue allows a nearby device to potentially determine the AuthValue used in the provisioning protocol via a brute-force attack, unless the AuthValue is sufficiently random and changed each time.
Recommendations:
For Bluetooth Mesh profile version 1.0, ensure the AuthValue is sufficiently random and changed each time to mitigate the risk.
For Bluetooth Mesh profile version 1.0.1, ensure the AuthValue is sufficiently random and changed each time to mitigate the risk.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾