PT-2020-13611 · Texas Instruments · Simplelink-Cc2640R2-Sdk

Published 2020-08-31 · Updated 2021-07-21 · CVE-2020-13593

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK versions 2.2.3 and earlier

Description The Bluetooth Low Energy Secure Manager Protocol implementation has a flaw that allows an attacker in radio range to skip the Diffie-Hellman check during Secure Connection pairing if the Link Layer encryption setup is performed earlier. This enables the attacker to establish an encrypted session with an unauthenticated Long Term Key, potentially achieving arbitrary read/write access to protected GATT service data, causing a denial of service, or controlling a device's function.

Recommendations For Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK versions 2.2.3 and earlier, consider disabling the Bluetooth Low Energy Secure Manager Protocol until a patch is available to prevent exploitation. Restrict access to protected GATT service data to minimize the risk of unauthorized access. Avoid using unauthenticated Long Term Keys in encrypted sessions to reduce the risk of device control or data breaches. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2020-13593

Affected Products

Simplelink-Cc2640R2-Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-13593 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13593 · Vendor Advisory
• http://ti.com/tool/BLE-STACK · Vendor Advisory
• https://asset-group.github.io/disclosures/sweyntooth · Note
• https://asset-group.github.io/cves.html · Note