CVE-2020-26556

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently…

published May 24, 2021

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00907 · 59.6th percentile
Published
2021-05-24T17:34Z
EPSS history
Timeline
  • 24 MAY 17:34Z
    Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently…
    cvelistv5