CVSS 3.1
5.4 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2020-26555
Medium (5.4). EPSS 0.9% chance of exploitation in the next 30 days.
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bluetooth:bluetooth_core_specification
- fedoraproject:fedora
- intel:ac_3165_firmware
- intel:ac_3168_firmware
- intel:ac_7265_firmware
- intel:ac_8260_firmware
- intel:ac_8265_firmware
- intel:ac_9260_firmware
- intel:ac_9461_firmware
- intel:ac_9462_firmware
- intel:ac_9560_firmware
- intel:ax200_firmware
- intel:ax201_firmware
- intel:ax210_firmware
- intel:killer_ac_1550_firmware
- intel:killer_wi-fi_6_ax1650_firmware
- intel:killer_wi-fi_6e_ax1675_firmware
References
- https://kb.cert.org/vuls/id/799380
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/
- https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html
- https://kb.cert.org/vuls/id/799380