CVE Feed

    Dashboard / CVE / CVE-2019-9506

    CVE-2019-9506

    The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

    Published:Aug 10, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 14, 2019
    EPSS Score:0.03146
    CVSS Score:8.1

    Affected Products

    Vendor
    Apple
    Product
    Iphone Os
    Vendor
    Apple
    Product
    Mac Os X
    Vendor
    Apple
    Product
    Tvos
    Vendor
    Apple
    Product
    Watchos
    Vendor
    Blackberry
    Product
    Blackberry
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Google
    Product
    Android
    Vendor
    Huawei
    Product
    Alp-al00b
    Vendor
    Huawei
    Product
    Alp-al00b Firmware
    Vendor
    Huawei
    Product
    Ares-al00b
    Vendor
    Huawei
    Product
    Ares-al00b Firmware
    Vendor
    Huawei
    Product
    Ares-al10d
    Vendor
    Huawei
    Product
    Ares-al10d Firmware
    Vendor
    Huawei
    Product
    Ares-tl00c
    Vendor
    Huawei
    Product
    Ares-tl00c Firmware
    Vendor
    Huawei
    Product
    Asoka-al00ax
    Vendor
    Huawei
    Product
    Asoka-al00ax Firmware
    Vendor
    Huawei
    Product
    Atomu-l33
    Vendor
    Huawei
    Product
    Atomu-l33 Firmware
    Vendor
    Huawei
    Product
    Atomu-l41
    Vendor
    Huawei
    Product
    Atomu-l41 Firmware
    Vendor
    Huawei
    Product
    Atomu-l42
    Vendor
    Huawei
    Product
    Atomu-l42 Firmware
    Vendor
    Huawei
    Product
    Barca-al00
    Vendor
    Huawei
    Product
    Barca-al00 Firmware
    Vendor
    Huawei
    Product
    Berkeley-al20
    Vendor
    Huawei
    Product
    Berkeley-al20 Firmware
    Vendor
    Huawei
    Product
    Berkeley-l09
    Vendor
    Huawei
    Product
    Berkeley-l09 Firmware
    Vendor
    Huawei
    Product
    Berkeley-tl10
    Vendor
    Huawei
    Product
    Berkeley-tl10 Firmware
    Vendor
    Huawei
    Product
    Bla-al00b
    Vendor
    Huawei
    Product
    Bla-al00b Firmware
    Vendor
    Huawei
    Product
    Bla-l29c
    Vendor
    Huawei
    Product
    Bla-l29c Firmware
    Vendor
    Huawei
    Product
    Bla-tl00b
    Vendor
    Huawei
    Product
    Bla-tl00b Firmware
    Vendor
    Huawei
    Product
    Cairogo-l22
    Vendor
    Huawei
    Product
    Cairogo-l22 Firmware
    Vendor
    Huawei
    Product
    Charlotte-l29c
    Vendor
    Huawei
    Product
    Charlotte-l29c Firmware
    Vendor
    Huawei
    Product
    Columbia-al10b
    Vendor
    Huawei
    Product
    Columbia-al10b Firmware
    Vendor
    Huawei
    Product
    Columbia-al10i
    Vendor
    Huawei
    Product
    Columbia-al10i Firmware
    Vendor
    Huawei
    Product
    Columbia-l29d
    Vendor
    Huawei
    Product
    Columbia-l29d Firmware
    Vendor
    Huawei
    Product
    Columbia-tl00d
    Vendor
    Huawei
    Product
    Columbia-tl00d Firmware
    Vendor
    Huawei
    Product
    Cornell-al00a
    Vendor
    Huawei
    Product
    Cornell-al00a Firmware
    Vendor
    Huawei
    Product
    Cornell-al00i
    Vendor
    Huawei
    Product
    Cornell-al00i Firmware
    Vendor
    Huawei
    Product
    Cornell-al00ind
    Vendor
    Huawei
    Product
    Cornell-al00ind Firmware
    Vendor
    Huawei
    Product
    Cornell-al10ind
    Vendor
    Huawei
    Product
    Cornell-al10ind Firmware
    Vendor
    Huawei
    Product
    Cornell-l29a
    Vendor
    Huawei
    Product
    Cornell-l29a Firmware
    Vendor
    Huawei
    Product
    Cornell-tl10b
    Vendor
    Huawei
    Product
    Cornell-tl10b Firmware
    Vendor
    Huawei
    Product
    Dubai-al00a
    Vendor
    Huawei
    Product
    Dubai-al00a Firmware
    Vendor
    Huawei
    Product
    Dura-al00a
    Vendor
    Huawei
    Product
    Dura-al00a Firmware
    Vendor
    Huawei
    Product
    Dura-tl00a
    Vendor
    Huawei
    Product
    Dura-tl00a Firmware
    Vendor
    Huawei
    Product
    Emily-l29c
    Vendor
    Huawei
    Product
    Emily-l29c Firmware
    Vendor
    Huawei
    Product
    Ever-l29b
    Vendor
    Huawei
    Product
    Ever-l29b Firmware
    Vendor
    Huawei
    Product
    Figo-l23
    Vendor
    Huawei
    Product
    Figo-l23 Firmware
    Vendor
    Huawei
    Product
    Figo-l31
    Vendor
    Huawei
    Product
    Figo-l31 Firmware
    Vendor
    Huawei
    Product
    Figo-tl10b
    Vendor
    Huawei
    Product
    Figo-tl10b Firmware
    Vendor
    Huawei
    Product
    Florida-al20b
    Vendor
    Huawei
    Product
    Florida-al20b Firmware
    Vendor
    Huawei
    Product
    Florida-l21
    Vendor
    Huawei
    Product
    Florida-l21 Firmware
    Vendor
    Huawei
    Product
    Florida-l22
    Vendor
    Huawei
    Product
    Florida-l22 Firmware
    Vendor
    Huawei
    Product
    Florida-l23
    Vendor
    Huawei
    Product
    Florida-l23 Firmware
    Vendor
    Huawei
    Product
    Florida-tl10b
    Vendor
    Huawei
    Product
    Florida-tl10b Firmware
    Vendor
    Huawei
    Product
    Harry-al00c
    Vendor
    Huawei
    Product
    Harry-al00c Firmware
    Vendor
    Huawei
    Product
    Harry-al10b
    Vendor
    Huawei
    Product
    Harry-al10b Firmware
    Vendor
    Huawei
    Product
    Harry-tl00c
    Vendor
    Huawei
    Product
    Harry-tl00c Firmware
    Vendor
    Huawei
    Product
    Hima-l29c
    Vendor
    Huawei
    Product
    Hima-l29c Firmware
    Vendor
    Huawei
    Product
    Honor 10 Lite
    Vendor
    Huawei
    Product
    Honor 10 Lite Firmware
    Vendor
    Huawei
    Product
    Honor 20
    Vendor
    Huawei
    Product
    Honor 20 Firmware
    Vendor
    Huawei
    Product
    Honor 20 Pro
    Vendor
    Huawei
    Product
    Honor 20 Pro Firmware
    Vendor
    Huawei
    Product
    Honor 8a
    Vendor
    Huawei
    Product
    Honor 8a Firmware
    Vendor
    Huawei
    Product
    Honor 8x
    Vendor
    Huawei
    Product
    Honor 8x Firmware
    Vendor
    Huawei
    Product
    Honor View 10
    Vendor
    Huawei
    Product
    Honor View 10 Firmware
    Vendor
    Huawei
    Product
    Honor View 20
    Vendor
    Huawei
    Product
    Honor View 20 Firmware
    Vendor
    Huawei
    Product
    Imanager Neteco
    Vendor
    Huawei
    Product
    Imanager Neteco 6000
    Vendor
    Huawei
    Product
    Imanager Neteco 6000 Firmware
    Vendor
    Huawei
    Product
    Imanager Neteco Firmware
    Vendor
    Huawei
    Product
    Jakarta-al00a
    Vendor
    Huawei
    Product
    Jakarta-al00a Firmware
    Vendor
    Huawei
    Product
    Johnson-tl00d
    Vendor
    Huawei
    Product
    Johnson-tl00d Firmware
    Vendor
    Huawei
    Product
    Johnson-tl00f
    Vendor
    Huawei
    Product
    Johnson-tl00f Firmware
    Vendor
    Huawei
    Product
    Katyusha-al00a
    Vendor
    Huawei
    Product
    Katyusha-al00a Firmware
    Vendor
    Huawei
    Product
    Laya-al00ep
    Vendor
    Huawei
    Product
    Laya-al00ep Firmware
    Vendor
    Huawei
    Product
    Leland-l21a
    Vendor
    Huawei
    Product
    Leland-l21a Firmware
    Vendor
    Huawei
    Product
    Leland-l31a
    Vendor
    Huawei
    Product
    Leland-l31a Firmware
    Vendor
    Huawei
    Product
    Leland-l32a
    Vendor
    Huawei
    Product
    Leland-l32a Firmware
    Vendor
    Huawei
    Product
    Leland-l32c
    Vendor
    Huawei
    Product
    Leland-l32c Firmware
    Vendor
    Huawei
    Product
    Leland-l42a
    Vendor
    Huawei
    Product
    Leland-l42a Firmware
    Vendor
    Huawei
    Product
    Leland-l42c
    Vendor
    Huawei
    Product
    Leland-l42c Firmware
    Vendor
    Huawei
    Product
    Leland-tl10b
    Vendor
    Huawei
    Product
    Leland-tl10b Firmware
    Vendor
    Huawei
    Product
    Leland-tl10c
    Vendor
    Huawei
    Product
    Leland-tl10c Firmware
    Vendor
    Huawei
    Product
    Lelandp-al00c
    Vendor
    Huawei
    Product
    Lelandp-al00c Firmware
    Vendor
    Huawei
    Product
    Lelandp-al10b
    Vendor
    Huawei
    Product
    Lelandp-al10b Firmware
    Vendor
    Huawei
    Product
    Lelandp-al10d
    Vendor
    Huawei
    Product
    Lelandp-al10d Firmware
    Vendor
    Huawei
    Product
    Lelandp-l22a
    Vendor
    Huawei
    Product
    Lelandp-l22a Firmware
    Vendor
    Huawei
    Product
    Lelandp-l22c
    Vendor
    Huawei
    Product
    Lelandp-l22c Firmware
    Vendor
    Huawei
    Product
    Lelandp-l22d
    Vendor
    Huawei
    Product
    Lelandp-l22d Firmware
    Vendor
    Huawei
    Product
    London-al40ind
    Vendor
    Huawei
    Product
    London-al40ind Firmware
    Vendor
    Huawei
    Product
    Madrid-al00a
    Vendor
    Huawei
    Product
    Madrid-al00a Firmware
    Vendor
    Huawei
    Product
    Madrid-tl00a
    Vendor
    Huawei
    Product
    Madrid-tl00a Firmware
    Vendor
    Huawei
    Product
    Mate 20
    Vendor
    Huawei
    Product
    Mate 20 Firmware
    Vendor
    Huawei
    Product
    Mate 20 Pro
    Vendor
    Huawei
    Product
    Mate 20 Pro Firmware
    Vendor
    Huawei
    Product
    Mate 20 X
    Vendor
    Huawei
    Product
    Mate 20 X Firmware
    Vendor
    Huawei
    Product
    Neo-al00d
    Vendor
    Huawei
    Product
    Neo-al00d Firmware
    Vendor
    Huawei
    Product
    Nova 3
    Vendor
    Huawei
    Product
    Nova 3 Firmware
    Vendor
    Huawei
    Product
    Nova 4
    Vendor
    Huawei
    Product
    Nova 4 Firmware
    Vendor
    Huawei
    Product
    Nova 5
    Vendor
    Huawei
    Product
    Nova 5 Firmware
    Vendor
    Huawei
    Product
    Nova 5i Pro
    Vendor
    Huawei
    Product
    Nova 5i Pro Firmware
    Vendor
    Huawei
    Product
    Nova Lite 3
    Vendor
    Huawei
    Product
    Nova Lite 3 Firmware
    Vendor
    Huawei
    Product
    P20
    Vendor
    Huawei
    Product
    P20 Firmware
    Vendor
    Huawei
    Product
    P20 Pro
    Vendor
    Huawei
    Product
    P20 Pro Firmware
    Vendor
    Huawei
    Product
    P30
    Vendor
    Huawei
    Product
    P30 Firmware
    Vendor
    Huawei
    Product
    P30 Pro
    Vendor
    Huawei
    Product
    P30 Pro Firmware
    Vendor
    Huawei
    Product
    P Smart
    Vendor
    Huawei
    Product
    P Smart 2019
    Vendor
    Huawei
    Product
    P Smart 2019 Firmware
    Vendor
    Huawei
    Product
    P Smart Firmware
    Vendor
    Huawei
    Product
    Paris-al00ic
    Vendor
    Huawei
    Product
    Paris-al00ic Firmware
    Vendor
    Huawei
    Product
    Paris-l21b
    Vendor
    Huawei
    Product
    Paris-l21b Firmware
    Vendor
    Huawei
    Product
    Paris-l21meb
    Vendor
    Huawei
    Product
    Paris-l21meb Firmware
    Vendor
    Huawei
    Product
    Paris-l29b
    Vendor
    Huawei
    Product
    Paris-l29b Firmware
    Vendor
    Huawei
    Product
    Potter-al00c
    Vendor
    Huawei
    Product
    Potter-al00c Firmware
    Vendor
    Huawei
    Product
    Potter-al10a
    Vendor
    Huawei
    Product
    Potter-al10a Firmware
    Vendor
    Huawei
    Product
    Princeton-al10b
    Vendor
    Huawei
    Product
    Princeton-al10b Firmware
    Vendor
    Huawei
    Product
    Princeton-al10d
    Vendor
    Huawei
    Product
    Princeton-al10d Firmware
    Vendor
    Huawei
    Product
    Princeton-tl10c
    Vendor
    Huawei
    Product
    Princeton-tl10c Firmware
    Vendor
    Huawei
    Product
    Sydney-al00
    Vendor
    Huawei
    Product
    Sydney-al00 Firmware
    Vendor
    Huawei
    Product
    Sydney-l21
    Vendor
    Huawei
    Product
    Sydney-l21 Firmware
    Vendor
    Huawei
    Product
    Sydney-l21br
    Vendor
    Huawei
    Product
    Sydney-l21br Firmware
    Vendor
    Huawei
    Product
    Sydney-l22
    Vendor
    Huawei
    Product
    Sydney-l22 Firmware
    Vendor
    Huawei
    Product
    Sydney-l22br
    Vendor
    Huawei
    Product
    Sydney-l22br Firmware
    Vendor
    Huawei
    Product
    Sydney-tl00
    Vendor
    Huawei
    Product
    Sydney-tl00 Firmware
    Vendor
    Huawei
    Product
    Sydneym-al00
    Vendor
    Huawei
    Product
    Sydneym-al00 Firmware
    Vendor
    Huawei
    Product
    Sydneym-l01
    Vendor
    Huawei
    Product
    Sydneym-l01 Firmware
    Vendor
    Huawei
    Product
    Sydneym-l03
    Vendor
    Huawei
    Product
    Sydneym-l03 Firmware
    Vendor
    Huawei
    Product
    Sydneym-l21
    Vendor
    Huawei
    Product
    Sydneym-l21 Firmware
    Vendor
    Huawei
    Product
    Sydneym-l22
    Vendor
    Huawei
    Product
    Sydneym-l22 Firmware
    Vendor
    Huawei
    Product
    Sydneym-l23
    Vendor
    Huawei
    Product
    Sydneym-l23 Firmware
    Vendor
    Huawei
    Product
    Tony-al00b
    Vendor
    Huawei
    Product
    Tony-al00b Firmware
    Vendor
    Huawei
    Product
    Tony-tl00b
    Vendor
    Huawei
    Product
    Tony-tl00b Firmware
    Vendor
    Huawei
    Product
    Y5 2018
    Vendor
    Huawei
    Product
    Y5 2018 Firmware
    Vendor
    Huawei
    Product
    Y5 Lite
    Vendor
    Huawei
    Product
    Y5 Lite Firmware
    Vendor
    Huawei
    Product
    Y6 2019
    Vendor
    Huawei
    Product
    Y6 2019 Firmware
    Vendor
    Huawei
    Product
    Y6 Prime 2018
    Vendor
    Huawei
    Product
    Y6 Prime 2018 Firmware
    Vendor
    Huawei
    Product
    Y6 Pro 2019
    Vendor
    Huawei
    Product
    Y6 Pro 2019 Firmware
    Vendor
    Huawei
    Product
    Y7 2019
    Vendor
    Huawei
    Product
    Y7 2019 Firmware
    Vendor
    Huawei
    Product
    Y9 2019
    Vendor
    Huawei
    Product
    Y9 2019 Firmware
    Vendor
    Huawei
    Product
    Yale-al00a
    Vendor
    Huawei
    Product
    Yale-al00a Firmware
    Vendor
    Huawei
    Product
    Yale-al50a
    Vendor
    Huawei
    Product
    Yale-al50a Firmware
    Vendor
    Huawei
    Product
    Yale-l21a
    Vendor
    Huawei
    Product
    Yale-l21a Firmware
    Vendor
    Huawei
    Product
    Yale-l61c
    Vendor
    Huawei
    Product
    Yale-l61c Firmware
    Vendor
    Huawei
    Product
    Yale-tl00b
    Vendor
    Huawei
    Product
    Yale-tl00b Firmware
    Vendor
    Huawei
    Product
    Yalep-al10b
    Vendor
    Huawei
    Product
    Yalep-al10b Firmware
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Real Time
    Vendor
    Redhat
    Product
    Enterprise Linux For Real Time Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Real Time For Nfv
    Vendor
    Redhat
    Product
    Enterprise Linux For Real Time For Nfv Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Tus
    Vendor
    Redhat
    Product
    Enterprise Mrg
    Vendor
    Redhat
    Product
    Mrg Realtime
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Extras Rt
    Vendor
    Redhat
    Product
    Rhel Tus
    Vendor
    Redhat
    Product
    Virtualization Host Eus

    Exploits

    https://github.com/coffeeesd/knobhttps://github.com/francozappa/knob

    Related CVEs

    CVE-2026-87545 (CVSS 6.5) — Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leverag…
    CVE-2026-87609 (CVSS 9.6) — Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execu…
    CVE-2026-87518 (CVSS 5.3) — Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote atta…
    CVE-2026-87482 (CVSS 5.9) — Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 al…
    CVE-2026-87517 (CVSS 3.1) — Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveragin…
    CVE-2026-85047 (CVSS 9.6) — Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a…
    CVE-2026-78964 (CVSS 9.6) — Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentia…
    CVE-2026-78957 (CVSS 5.5) — Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtai…
    CVE-2026-78981 (CVSS 6.5) — Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to poten…
    CVE-2026-79105 (CVSS 4.3) — Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacke…

    References

    http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html
    http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html
    http://seclists.org/fulldisclosure/2019/Aug/11
    http://seclists.org/fulldisclosure/2019/Aug/13
    http://seclists.org/fulldisclosure/2019/Aug/14
    http://seclists.org/fulldisclosure/2019/Aug/15
    http://www.cs.ox.ac.uk/publications/publication12404-abstract.html
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en
    https://access.redhat.com/errata/RHSA-2019:2975
    https://access.redhat.com/errata/RHSA-2019:3055
    https://access.redhat.com/errata/RHSA-2019:3076
    https://access.redhat.com/errata/RHSA-2019:3089
    https://access.redhat.com/errata/RHSA-2019:3165
    https://access.redhat.com/errata/RHSA-2019:3187
    https://access.redhat.com/errata/RHSA-2019:3217
    https://access.redhat.com/errata/RHSA-2019:3218
    https://access.redhat.com/errata/RHSA-2019:3220
    https://access.redhat.com/errata/RHSA-2019:3231
    https://access.redhat.com/errata/RHSA-2019:3309
    https://access.redhat.com/errata/RHSA-2019:3517
    https://access.redhat.com/errata/RHSA-2020:0204
    https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
    https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html
    https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
    https://usn.ubuntu.com/4115-1/
    https://usn.ubuntu.com/4118-1/
    https://usn.ubuntu.com/4147-1/
    https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/
    https://www.kb.cert.org/vuls/id/918987/
    https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli
    http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html
    http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html
    http://seclists.org/fulldisclosure/2019/Aug/11
    http://seclists.org/fulldisclosure/2019/Aug/13
    http://seclists.org/fulldisclosure/2019/Aug/14
    http://seclists.org/fulldisclosure/2019/Aug/15
    http://www.cs.ox.ac.uk/publications/publication12404-abstract.html
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en
    https://access.redhat.com/errata/RHSA-2019:2975
    https://access.redhat.com/errata/RHSA-2019:3055
    https://access.redhat.com/errata/RHSA-2019:3076
    https://access.redhat.com/errata/RHSA-2019:3089
    https://access.redhat.com/errata/RHSA-2019:3165
    https://access.redhat.com/errata/RHSA-2019:3187
    https://access.redhat.com/errata/RHSA-2019:3217
    https://access.redhat.com/errata/RHSA-2019:3218
    https://access.redhat.com/errata/RHSA-2019:3220
    https://access.redhat.com/errata/RHSA-2019:3231
    https://access.redhat.com/errata/RHSA-2019:3309
    https://access.redhat.com/errata/RHSA-2019:3517
    https://access.redhat.com/errata/RHSA-2020:0204
    https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
    https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html
    https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
    https://usn.ubuntu.com/4115-1/
    https://usn.ubuntu.com/4118-1/
    https://usn.ubuntu.com/4147-1/
    https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/
    https://www.kb.cert.org/vuls/id/918987/
    https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High