CVE-2020-26557

CVE-2020-26557 : Bluetooth Mesh Provisioning in Bluetooth Mesh profile 1.0/1.0.1 allows a nearby device, without the AuthValue, to brute-force or deduce the AuthValue used in provisioning if the AuthValue is not sufficiently random or is reused. This can enable an attacker to complete provisionin...

CVE-2020-26557

Removed by vendor...

CVE-2020-26557

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device without possession of the AuthValue used in the provisioning protocol to determine the AuthValue via a brute-force attack unless the AuthValue is sufficiently random and changed each time...

CVE-2020-26559

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device participating in the provisioning protocol to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could...

CVE-2020-26559

Removed by vendor...

CVE-2020-26559

CVE-2020-26559 (Bluetooth Mesh Provisioning) affects Bluetooth Mesh provisioning (Mesh profile 1.0/1.0.1). A nearby attacker participating in the provisioning protocol can identify the AuthValue and the provisioning device’s confirmation number and nonce, potentially enabling provisioning complet...

CVE-2020-26560

CVE-2020-26560 relates to Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0/1.0.1. A nearby attacker can exploit the provisioning exchange to authenticate without possessing the AuthValue and potentially obtain the NetKey and AppKey. The connected CIRCL sighting lists this CVE among B...

CVE-2020-26560

Removed by vendor...

CVE-2020-26560

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey...

Bluetooth Mesh 授权问题漏洞

Bluetooth Mesh is an application. A Bluetooth profile. An authorization issue vulnerability exists in Bluetooth Mesh profile version 1.0 and Mesh Provisioning version 1.0.1, which allows nearby devices to successfully brute-force AuthValue before the provisioning process times out to complete...

PT-2021-11248 · Unknown · Bluetooth Mesh

Name of the Vulnerable Software and Affected Versions: Bluetooth Mesh profile versions 1.0 through 1.0.1 Description: The issue allows a nearby device participating in the provisioning protocol to identify the AuthValue used, given the Provisioner's public key, and the confirmation number and non...

Bluetooth Mesh 安全漏洞

Bluetooth Mesh is an application. A configuration file for Bluetooth. A security vulnerability exists in Bluetooth Mesh that allows devices without AuthValue to complete configuration without forcing AuthValue...

Devices supporting Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure

Overview Devices supporting the Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure that could allow an attacker to impersonate a legitimate device during pairing. Description The Bluetooth Core Specification and Mesh Profile Specification are t...

PT-2021-11247 · Unknown · Bluetooth Mesh

Name of the Vulnerable Software and Affected Versions: Bluetooth Mesh profile versions 1.0 and 1.0.1 Description: The issue allows a nearby device to potentially determine the AuthValue used in the provisioning protocol via a brute-force attack, unless the AuthValue is sufficiently random and...

Bluetooth Mesh 授权问题漏洞

Bluetooth Mesh is an application. A Bluetooth profile. A security vulnerability in Mesh Provisioning in Bluetooth Mesh profile versions 1.0 and 1.0.1 allows nearby devices to determine the AuthValue via a brute-force attack unless the AuthValue is sufficiently randomized and changed each time...

Bluetooth Mesh 安全漏洞

Bluetooth Mesh is an application. A Bluetooth profile. A security vulnerability exists in Bluetooth Mesh that allows a nearby device to complete authentication without having an AuthValue and potentially obtain a NetKey and AppKey...

RHEL 8 : servicemesh (RHSA-2021:2085)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2085 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...

Important: Red Hat Security Advisory: servicemesh security update

An update for servicemesh is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.5 security update

An update for servicemesh is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

RHEL 8 : Red Hat OpenShift Service Mesh 2.0.5 (RHSA-2021:2061)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2061 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...