Design/Logic Flaw

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.0 through 4.2 for ESP32 devices returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can...

CVE-2020-13595

The CVE-2020-13595 entry covers a vulnerability in Espressif ESP-IDF (ESP32) BLE controller (versions 4.0–4.2) where the controller returns the incorrect number of completed BLE packets and triggers a reachable assertion on the host stack when processing a packet with an MIC failure. This can be ...

CVE-2020-13594

CVE-2020-13594 concerns the BLE controller in Espressif ESP-IDF 4.2 and earlier for ESP32. The vulnerability arises because the channel map field of the connection request packet is not properly restricted, allowing radio-range attackers to crash the device via a crafted packet ( denial of servic...

CVE-2020-13594: Improper Input Validation

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.2 and earlier for ESP32 devices does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service crash via a crafted packet...

CVE-2020-13595: Reachable Assertion

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.0 through 4.2 for ESP32 devices returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can...

PT-2020-13612

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.2 and earlier Description The issue is related to the Bluetooth Low Energy BLE controller implementation, which does not properly restrict the channel map field of the connection request packet on reception. This...

PT-2020-13613

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.0 through 4.2 Description The issue concerns the Bluetooth Low Energy BLE controller implementation, which returns an incorrect number of completed BLE packets and triggers a reachable assertion on the host stack...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

Code injection

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

CVE-2020-15509 affects Nordic Semiconductor Android BLE Library up to 2.2.1 and the DFU Library up to 1.10.4 (used by nRF Connect and others). The issue is unencrypted communication being presented as encrypted, originating from the bond creation path (e.g., internalCreateBond in BleManagerHandle...

CVE-2020-15509: Cleartext Transmission of Sensitive Information

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

PT-2020-14468

Name of the Vulnerable Software and Affected Versions Nordic Semiconductor Android BLE Library versions 2.2.1 and earlier Nordic Semiconductor Android DFU Library versions 1.10.4 and earlier Description The issue allows the library to engage in unencrypted communication while indicating to the us...

PT-2020-11490

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the SetData function of btm ble multi adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution...

Cypress Semiconductor PSoC Creator BLE Security Feature Issue Vulnerability

Cypress Semiconductor PSoC Creator BLE is a programmable embedded system-on-chip with integrated Bluetooth Low Energy BLE from Cypress Semiconductor. A security signature issue vulnerability exists in Cypress Semiconductor PSoC Creator 4.2 BLE prior to version 3.64, which stems from the BLE...

CVE-2020-11957

CVE-2020-11957 affects Cypress PSoC Creator BLE 4.2 component, where versions before 3.64 generate a 128-bit Pairing Random with insufficient entropy. This weak random value enables a nearby attacker to perform a MITM during BLE pairing for both LE Secure Connections and LE Legacy Pairing (authen...

PT-2020-12949

Name of the Vulnerable Software and Affected Versions Cypress PSoC Creator BLE 4.2 component versions prior to 3.64 Description The Bluetooth Low Energy implementation generates a random number with significantly less entropy than specified during BLE pairing, allowing an attacker in radio range ...

CVE-2020-11957: Insufficient Entropy

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...