CVE-2021-3658 in BlueZ

Riassunto

di MITRE • 03/03/2022

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 22/07/2021
• Divulgazione: 03/03/2022
• Moderazione: accettato
• Voce: VDB-194108
• CPE: pronto
• CWE: CWE-863 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.00795
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-3658
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-3658
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-3658/