CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the…

published September 9, 2020

CVSS
—
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone without authorisation, bypassing the Bluetooth address randomisation protection in the user's phone.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01309 · 70.4th percentile
Published
2020-09-09T16:11Z
EPSS history
Timeline
  • 09 SEP 16:11Z
    In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the…
    cvelistv5