CVE-2018-10910CWE-863

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system

Medium · published January 28, 2019

CVSS v3.0
4.5
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

The record
Technical detail
CVSS v3.0
4.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-01-28T15:00Z
EPSS history
Timeline
  • 28 JAN 15:00Z
    A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system
    cvelistv5