Bluetooth Core Specification vulnerabilitiesRanked by how likely they are to be used.
Bluetooth Core Specification is made by Bluetooth. We track 10 published vulnerabilities in it, across 13 versions. None of them is on the list of flaws known to be exploited today. If you run Bluetooth Core Specification, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Bluetooth Core Specification vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Bluetooth Core Specification's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Bluetooth Core Specification flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 7.1%CVE-2020-15802Medium
Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth.
- 1.3%CVE-2023-24023Medium
Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead...
- 0.9%CVE-2020-26556High
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times...
- 0.9%CVE-2020-26555Medium
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of...
- 0.9%CVE-2020-26558Medium
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication...
- 0.4%CVE-2022-24695Medium
Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode.
- 0.4%CVE-2021-31615Medium
Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the...
- 0.4%CVE-2020-35473Medium
An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specifications 5.0 through...
- 0.4%CVE-2022-25836High
Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when the MITM negotiates Legacy...
- 0.4%CVE-2022-25837High
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR...
Running Bluetooth Core Specification? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already established on the opposing transport, BR/EDR or LE, potentially overwriting an authenticated key with an unauthenticated key, or a key with greater entropy with one with less.
- Matched to
- Bluetooth Core Specification on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 10 published vulnerabilities listed under the name Bluetooth Core Specification, across 13 versions.
None of Bluetooth Core Specification's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Bluetooth Core Specification. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.