CVE-2020-10134

CVE-2020-10134 describes a medium-severity vulnerability in Bluetooth Core v5.2 and earlier that could allow an unauthenticated, adjacent attacker to acquire credentials. This is achieved by manipulating pairing methods between two devices, tricking a user into completing a Man-in-the-Middle (MITM) attack. The attack requires user interaction and could lead to high confidentiality impact and low integrity impact, enabling the attacker to initiate Bluetooth operations on the compromised devices. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.