bluetooth core specification vulnerabilities and fixes

Recent CVEs affecting bluetooth core specification, with upgrade or downgrade steps. 5 tracked.

Also searched as: bluetoothcorespecification.

bluetooth core specification has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-11-28. Highest priority: CVE-2023-24023 (score 46/100).

• CVE-2023-24023 MEDIUM 6.8 UPGRADE UPGRADE Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specifica
• CVE-2022-25837 HIGH 7.5 UPGRADE Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to ac
• CVE-2022-25836 HIGH 7.5 UPGRADE Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated
• CVE-2022-24695 MEDIUM 4.3 UPGRADE Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for
• CVE-2020-35473 MEDIUM 4.3 UPGRADE An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core

FAQ

How do I fix bluetooth core specification vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bluetooth core specification being exploited right now?

None of the tracked bluetooth core specification CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bluetooth core specification CVE should I patch first?

CVE-2023-24023 currently ranks highest (46/100): Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specifica.

RSS feed for bluetooth core specification · ← Back to latest CVEs