PatchTheCVEbluetooth vulnerabilities
Recent CVEs affecting bluetooth products. 5 tracked.
bluetooth has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-11-28. Highest priority: CVE-2023-24023 (score 46/100).
- CVE-2023-24023 MEDIUM 6.8 UPGRADE UPGRADE Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specifica
- CVE-2022-25837 HIGH 7.5 UPGRADE Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to ac
- CVE-2022-25836 HIGH 7.5 UPGRADE Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated
- CVE-2022-24695 MEDIUM 4.3 UPGRADE Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for
- CVE-2020-35473 MEDIUM 4.3 UPGRADE An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core
FAQ
How do I fix bluetooth vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bluetooth being exploited right now?
None of the tracked bluetooth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bluetooth CVE should I patch first?
CVE-2023-24023 currently ranks highest (46/100): Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specifica.