PT-2024-18801 · Unknown · Bluetooth Low Energy
CVE-2024-20889
·
Published
2024-07-02
·
Updated
2024-07-05
CVSS v3.1
5.9
Medium
| Vector | AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Bluetooth Low Energy (BLE) versions prior to SMR Jul-2024 Release 1
Description
The issue is related to improper authentication in BLE, allowing adjacent attackers to pair with devices. This could potentially lead to unauthorized access.
Recommendations
For versions prior to SMR Jul-2024 Release 1, update to SMR Jul-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting device pairing to trusted devices only until the update is applied.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bluetooth Low Energy