CVE-2020-13702

The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart…

Medium · published June 11, 2020

CVSS v3.1
4.3
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart Privacy because there is a secondary temporary UID. An attacker with access to Beacon or IoT networks can seamlessly track individual device movement via a Bluetooth LE discovery mechanism.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.02173 · 82.2th percentile
Published
2020-06-11T18:16Z
EPSS history
Timeline
  • 11 JUN 18:16Z
    The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart…
    cvelistv5