Bluetooth Core Specification
Vendor:
First CVE: Sep 11, 2020 · Active for 5 years
10
Total CVEs
More Total CVEs than 88% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
5.9
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Bluetooth Core Specification over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 11, 2020
5 years ago
Most Recent CVE
Nov 28, 2023
969 days ago
CVE Severity & Scoring
Bluetooth Core Specification10 CVEs
70%
30%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (10.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network9 (90.0%)
Attack Complexity
Low3 (30.0%)
High7 (70.0%)
Unknown0 (0.0%)
User Interaction
None8 (80.0%)
Unknown0 (0.0%)
Required2 (20.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None10 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-25837HIGH Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at | Dec 12, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-25836HIGH Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent acce | Dec 12, 2022 | 7.5 | 25 | NO | NO |
CVE-2020-26556HIGH Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue befo | May 24, 2021 | 7.5 | 24 | NO | NO |
CVE-2023-24023MEDIUM Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that forc | Nov 28, 2023 | 6.8 | 19 | NO | NO |
CVE-2020-26555MEDIUM Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to com | May 24, 2021 | 5.4 | 19 | NO | NO |
CVE-2020-15802MEDIUM Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit | Sep 11, 2020 | 5.9 | 19 | NO | NO |
CVE-2020-35473MEDIUM An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetoo | Nov 8, 2022 | 4.3 | 18 | NO | NO |
CVE-2021-31615MEDIUM Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window | Jun 25, 2021 | 5.3 | 18 | NO | NO |
CVE-2020-26558MEDIUM Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (i | May 24, 2021 | 4.2 | 18 | NO | NO |
CVE-2022-24695MEDIUM Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. By conducting an eff | Jun 2, 2023 | 4.3 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Bluetooth Core Specification
Top CWEs
Versions
No cataloged versions.