PT-2020-6904 · Unknown +1 · React Native Bluetooth Scan +1

🗓️ 27 Apr 2020 00:00:00Reported by Positive TechnologiesType

Bluezone version 1.0.0 uses insufficiently random IDs in Bluetooth Scan, risking contact tracing interference.

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of the React Native Bluetooth Scan component of the Bluezone application, which allows a intruder to gain unauthorized access to protected information.	13 Sep 202300:00	–	bdu_fstec
CNVD	Bluezone Security Feature Issue Vulnerability	27 Apr 202000:00	–	cnvd
CVE	CVE-2020-12270	27 Apr 202003:26	–	cve
Cvelist	CVE-2020-12270	27 Apr 202003:26	–	cvelist
NVD	CVE-2020-12270	27 Apr 202004:15	–	nvd
OSV	CVE-2020-12270	27 Apr 202004:15	–	osv
Prion	Design/Logic Flaw	27 Apr 202004:15	–	prion
RedhatCVE	CVE-2020-12270	22 May 202517:49	–	redhatcve

Source	Link
vnhacker	www.vnhacker.blogspot.com/2020/04/vietnams-contact-tracing-app_26.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-12270
bdu	www.bdu.fstec.ru/vul/2023-05492
github	www.github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/CHANGELOG.md
github	www.github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/package.json
github	www.github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/java/com/scan/TraceCovidModule.java
github	www.github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/java/com/scan/BluezonerIdGenerator.java
github	www.github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/AndroidManifest.xml
t	www.t.me/cvenotify/88968
bluezone	www.bluezone.ai/CVE

04 Aug 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 23.3 - 6.1

CVSS 3.16.5

EPSS0.01432