CVE-2024-8805 — Improper Access Control in Bluez
Severity
8.8HIGHNVD
NVD5.5OSV5.5OSV4.4
EPSS
2.6%
top 14.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 22
Latest updateJul 18
Description
BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code …
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages7 packages
▶CVEListV5linux/linuxba15a58b179ed76a7e887177f2b06de12c58ec8f — baaa50c6f91ea5a9c7503af51f2bc50e6568b66b+13