Lucene search

K
redhatcveRedhat.comRH:CVE-2023-24023
HistoryDec 18, 2023 - 7:56 a.m.

CVE-2023-24023

2023-12-1807:56:46
redhat.com
access.redhat.com
34
bluetooth
flaw
man-in-the-middle
vulnerability
encryption key
red hat product security

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.9%

A flaw was found in Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4. This issue may allow certain man-in-the-middle attacks that force a short key length and might lead to discovery of the encryption key and live injection, aka BLUFFS.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.