CVE-2020-26558 — Improper Authentication in Core Specification

CWE-287 — Improper AuthenticationCWE-639 — Authorization Bypass Through User-Controlled Key25 documents10 sources
Severity
4.2MEDIUMNVD
EPSS
0.0%
top 93.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Platform System BTBluezLinux Kernel+3 more
Timeline
PublishedMay 24
Latest updateOct 1

Description

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Pas…

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 1.6 | Impact: 2.5

Affected Packages6 packages

▶Androidplatform/system_bt8.1:0 — 8.1:2021-06-05+3
▶NVDlinux/linux_kernel< 5.13
▶Debianbluez/bluez< 5.55-3.1+3
▶Ubuntubluez/bluez< 5.48-0ubuntu3.5+2

Also affects: Debian Linux 9.0, Fedora 34

🔴Vulnerability Details

10
GHSA
GHSA-7g33-jchx-2fjc: Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2↗2022-05-24
▶
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities↗2022-02-22
▶
OSV
linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-oracle-5.8 vulnerabilities↗2021-08-24
▶
OSV
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.11, linux-kvm, linux-oracle, linux-raspi vulnerabilities↗2021-08-18
▶
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.↗2021-07-20
▶

📋Vendor Advisories

13
Red Hat
bluez: Bluetooth Passkey Reflection Attack in Secure Pairing↗2024-10-01
▶
Ubuntu
Linux kernel vulnerabilities↗2022-03-22
▶
Ubuntu
Linux kernel vulnerabilities↗2022-02-22
▶
Ubuntu
Linux kernel vulnerabilities↗2021-08-24
▶
Ubuntu
Linux kernel vulnerabilities↗2021-08-18
▶

💬Community

1
Bugzilla
CVE-2020-26558 bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack↗2021-01-21
▶
CVE-2020-26558 — Improper Authentication | cvebase