PT-2020-13959 · Australian Government · Covidsafe

Published 2020-09-09 · Updated 2021-07-21 · CVE-2020-14292

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions COVIDSafe application through 1.0.21 for Android

Description The issue allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, revealing the public Bluetooth address of the victim's phone without authorization, bypassing the Bluetooth address randomisation protection in the user's phone. This is due to the unsafe use of the Bluetooth transport option in the GATT connection.

Recommendations For COVIDSafe application versions through 1.0.21 for Android, consider disabling the Bluetooth functionality until a patch is available to prevent exploitation. Restrict access to the GATT connection to minimize the risk of revealing the public Bluetooth address.

Exploit

Fix

Related Identifiers

CVE-2020-14292

Affected Products

Covidsafe

References · 6

• 🔥 https://github.com/AU-COVIDSafe/mobile-android/blob/b827cf3ccef72a3d38c6fc37466a99868823540f/app/src/main/java/au/gov/health/covidsafe/streetpass/Work.kt#L35-L41 · Exploit
• 🔥 https://github.com/alwentiu/CVE-2020-14292 · Exploit
• https://covidsafe.watch/issue-register · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14292 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14292 · Vendor Advisory
• https://health.gov.au/resources/apps-and-tools/covidsafe-app · Note