PT-2021-11247
CVE-2020-26557
·
Published
2021-05-24
·
Updated
2026-10-09
Description by
CVSS 3.1
7.5
HighMetricsAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Bluetooth Mesh profile versions 1.0 and 1.0.1
Description:
The issue allows a nearby device to potentially determine the AuthValue used in the provisioning protocol via a brute-force attack, unless the AuthValue is sufficiently random and changed each time.
Recommendations:
For Bluetooth Mesh profile version 1.0, ensure the AuthValue is sufficiently random and changed each time to mitigate the risk.
For Bluetooth Mesh profile version 1.0.1, ensure the AuthValue is sufficiently random and changed each time to mitigate the risk.
Found an issue in the description? Have something to add? Feel free to write us 👾