CVE-2026-65935 in WiseConnect
Summary
by MITRE • 08/13/2026
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/13/2026
The vulnerability described represents a critical security flaw in the Bluetooth Low Energy implementation of the RS9116W and SiWx917 wireless chips, specifically within their passkey entry legacy pairing mechanism. This issue allows attackers to bypass the intended authentication process through manipulation of temporary key values during the pairing sequence. The vulnerability stems from insufficient validation of cryptographic parameters during the legacy Bluetooth pairing procedure, creating an exploitable path that undermines the security guarantees typically associated with secure device authentication.
The technical implementation flaw occurs at the cryptographic protocol level where the temporary key values used in the legacy pairing process are not properly validated or checked for consistency. This weakness enables an attacker to manipulate the key exchange process by injecting modified temporary keys that can trick the authentication system into accepting invalid credentials. The vulnerability specifically affects the passkey entry method, which relies on a numeric comparison between devices during pairing, making it susceptible to man-in-the-middle attacks that exploit the predictable nature of legacy key generation and validation.
Operational impact of this vulnerability extends beyond simple unauthorized access to potentially enabling full device compromise and data interception across connected networks. Attackers can leverage this weakness to gain persistent access to IoT devices using these chips, potentially compromising entire IoT ecosystems where these components are deployed. The vulnerability affects devices that rely on secure Bluetooth pairing for establishing trusted connections, making it particularly dangerous in environments where device security is paramount such as industrial control systems, smart home infrastructures, or medical devices.
Mitigation strategies should include firmware updates from manufacturers addressing the cryptographic validation gaps in the legacy pairing implementation, along with immediate deployment of secure alternative pairing methods that do not rely on vulnerable legacy protocols. Organizations should implement network monitoring to detect anomalous Bluetooth pairing behavior and consider disabling legacy pairing modes where possible. The vulnerability aligns with CWE-310 and CWE-327 which address cryptographic weakness and improper encryption implementations respectively, while also mapping to ATT&CK technique T1566 related to credential access through network attacks. Additionally, this issue demonstrates the importance of proper key validation in cryptographic protocols as outlined in NIST SP 800-57 and other security standards that emphasize the need for robust authentication mechanisms in wireless communications.