PT-2021-19447 · Bluetooth · Bluetooth

Published 2021-06-25 · Updated 2022-07-12 · CVE-2021-31615

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bluetooth Core Specifications versions 4.0 through 5.2

Description The issue affects unencrypted Bluetooth Low Energy baseband links, allowing an adjacent device to inject a crafted packet during the receive window of the listening device. This can achieve full Man-In-The-Middle (MITM) status without terminating the link. However, when applied against devices using encrypted links, the crafted packets may only terminate an existing link without compromising the confidentiality or integrity of the link.

Recommendations For Bluetooth Core Specifications versions 4.0 through 5.2, consider implementing encryption for Bluetooth Low Energy baseband links to prevent MITM attacks. As a temporary workaround, restrict the use of unencrypted links to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2021-31615

Affected Products

Bluetooth

References · 8

• https://cve.org/CVERecord?id=CVE-2021-31615 · Security Note
• https://bluetooth.com · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-31615 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-31615 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31615 · Security Note
• https://bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/injectable · Vendor Advisory
• https://t.me/cibsecurity/25703 · Telegram Post