CVE-2023-24023

CVE-2023-24023, known as BLUFFS, is a medium-severity vulnerability affecting Bluetooth BR/EDR devices utilizing Secure Simple Pairing and Secure Connections in Bluetooth Core Specification versions 4.2 through 5.4. This flaw allows man-in-the-middle attacks to force a short encryption key length, potentially leading to encryption key discovery and live data injection. The attack requires adjacent access and high attack complexity, but can result in high confidentiality and integrity impacts. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion and media coverage, indicating a high level of interest.