CVE Feed

    Dashboard / CVE / CVE-2020-15802

    CVE-2020-15802

    Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already established on the opposing transport, BR/EDR or LE, potentially overwriting an authenticated key with an unauthenticated key, or a key with greater entropy with one with less.

    Published:Sep 10, 2020
    Last Modified:Nov 21, 2024
    EPS:Sep 11, 2020
    EPSS Score:0.47737
    CVSS Score:5.9

    Affected Products

    Vendor
    Bluetooth
    Product
    Bluetooth Core Specification

    Exploits

    https://github.com/francozappa/blur

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
    CAPEC-104 Cross Zone Scripting
    CAPEC-114 Authentication Abuse
    CAPEC-115 Authentication Bypass
    CAPEC-127 Directory Indexing
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-151 Identity Spoofing
    CAPEC-17 Using Malicious Files
    CAPEC-194 Fake the Source of Data
    CAPEC-22 Exploiting Trust in Client
    CAPEC-39 Manipulating Opaque Client-based Data Tokens
    CAPEC-402 Bypassing ATA Password Security
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-5 Blue Boxing
    CAPEC-51 Poison Web Service Registry
    CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
    CAPEC-59 Session Credential Falsification through Prediction
    CAPEC-593 Session Hijacking
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-633 Token Impersonation
    CAPEC-647 Collect Data from Registries
    CAPEC-650 Upload a Web Shell to a Web Server
    CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB)
    CAPEC-76 Manipulating Web Input to File System Calls
    CAPEC-77 Manipulating User-Controlled Variables
    CAPEC-87 Forceful Browsing
    CAPEC-94 Adversary in the Middle (AiTM)

    Related CVEs

    CVE-2023-24023 (CVSS 6.8) — Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specifica…
    CVE-2022-24695 (CVSS 4.3) — Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for…
    CVE-2022-25836 (CVSS 7.5) — Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated …
    CVE-2022-25837 (CVSS 7.5) — Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to ac…
    CVE-2020-35473 (CVSS 4.3) — An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core…
    CVE-2021-31615 (CVSS 5.3) — Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an…
    CVE-2020-26558 (CVSS 4.2) — Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man…
    CVE-2020-26555 (CVSS 5.4) — Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauth…
    CVE-2020-26556 (CVSS 7.5) — Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a su…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High