CVE-2021-31615

CVE-2021-31615 describes a vulnerability in Bluetooth Core Specifications 4.0 through 5.2 where unencrypted Bluetooth Low Energy links can be exploited by an adjacent attacker. This allows for the injection of crafted packets during a specific receive window, potentially leading to a full Man-in-the-Middle (MITM) attack without terminating the link. While encrypted links are not compromised in terms of confidentiality or integrity, crafted packets can still terminate existing connections. The vulnerability has a CVSS score of 5.3 (Medium), indicating an adjacent attack vector, high attack complexity, and a high impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.