CVE-2021-3658CWE-863

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up

Medium · published March 2, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00789 · 55.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-03-02T22:11Z
EPSS history
Timeline
  • 02 MAR 22:11Z
    bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up
    cvelistv5