Bluetooth Mesh Profile 1.0.1

CPE Details

Bluetooth Mesh Profile 1.0.1
bluetooth
mesh_profile
1.0.1
2021-05-28
11h37 +00:00
2021-05-28
12h06 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:bluetooth:mesh_profile:1.0.1:*:*:*:*:*:*:*

Informations

Vendor

bluetooth

Product

mesh_profile

Version

1.0.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-26556 2021-05-24 15h34 +00:00 Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment.
7.5
Haute
CVE-2020-26557 2021-05-24 15h28 +00:00 Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute-force attack (unless the AuthValue is sufficiently random and changed each time).
7.5
Haute
CVE-2020-26559 2021-05-24 15h13 +00:00 Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue.
8.8
Haute
CVE-2020-26560 2021-05-24 15h06 +00:00 Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey.
8.1
Haute