Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Bluetooth Core Specification MEDIUM 6.8
CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-…

Fix: 10.0.17763.5122 / 10.0.19043.3693+
Fix from $1,600 2023-11-28
Bluetooth Core Specification HIGH 7.5
CVE-2022-25836

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pa…

Fix: after 5.3
Fix from $1,950 2022-12-12
Bluetooth Core Specification HIGH 7.5
CVE-2022-25837

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devi…

Fix: after 5.3
Fix from $1,950 2022-12-12
Bluetooth Core Specification MEDIUM 5.3
CVE-2021-31615

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted pa…

Fix: after 5.2
Fix from $1,600 2021-06-25
Mesh Profile HIGH 8.8
CVE-2020-26559

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to id…

Mitigation only
Fix from $1,950 2021-05-24
Mesh Profile HIGH 8.1
CVE-2020-26560

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Pro…

Mitigation only
Fix from $1,950 2021-05-24
Bluetooth Core Specification HIGH 7.5
CVE-2020-26556

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insuf…

Fix: after 5.2
Fix from $1,950 2021-05-24
Mesh Profile HIGH 7.5
CVE-2020-26557

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisionin…

Mitigation only
Fix from $1,950 2021-05-24
Bluetooth Core Specification MEDIUM 5.9
CVE-2020-15802EPSS 7%

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specific…

Fix: 5.1+
Fix from $1,600 2020-09-11
Bluetooth Core MEDIUM 5.4
CVE-2020-10135

Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated use…

Fix: after 5.2
Fix from $1,600 2020-05-19
Bluetooth Core MEDIUM 6.3
CVE-2020-10134

Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent acces…

Fix: after 5.2
Fix from $1,600 2020-05-19
Bluetooth Stack HIGH 8.8
CVE-2011-1265EPSS 6%

The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were …

Patch available
Fix from $1,950 2011-07-13