CVE-2020-14292

CVE-2020-14292: COVIDSafe 앱의 블루투스 전송Bluetooth Transport 문제 작성자: Alwen Tiu, 호주국립대학교The Australian National University 최종 업데이트: 2020-09-08 요약 Android용 COVIDSafe 앱 1.0.21 이하 버전에서 GATT 연결 시 블루투스 전송 옵션을 안전하지 않게 사용하여, 공격자가 앱을 속여 블루투스 BR/EDR 전송 방식으로 연결을 설정하게 할 수 있으며, 이를 통해 사용자 동의 없이 피해자 휴대폰의 공개 블루투스 주소가...

EUVD-2020-6445

Malware in sbrugna...

Code injection

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

PT-2020-13959

Name of the Vulnerable Software and Affected Versions COVIDSafe application through 1.0.21 for Android Description The issue allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, revealing the public Bluetooth address of the victim's phone witho...