Bluetooth vulnerabilitiesNone on the known-exploited list.
Bluetooth has 16 published vulnerabilities across 4 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Bluetooth Core Specification, with 10. If you run Bluetooth software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Bluetooth products have the most vulnerabilities?
Bluetooth Core Specification leads with 10 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Bluetooth vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Bluetooth's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Bluetooth flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 7.1%CVE-2020-15802Medium
Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth.
- 2.4%CVE-2020-10135Medium
Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via...
- 1.3%CVE-2023-24023Medium
Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead...
- 0.9%CVE-2020-26556High
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times...
- 0.9%CVE-2020-26555Medium
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of...
- 0.9%CVE-2020-26558Medium
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication...
- 0.9%CVE-2020-26560High
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the...
- 0.9%CVE-2020-26559High
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and...
- 0.8%CVE-2020-26557High
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute-force attack...
All Bluetooth products we track.
4 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
Running Bluetooth? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already established on the opposing transport, BR/EDR or LE, potentially overwriting an authenticated key with an unauthenticated key, or a key with greater entropy with one with less.
- Matched to
- Bluetooth Core Specification on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 16 published vulnerabilities across 4 products and 17 versions from Bluetooth.
None of Bluetooth's vulnerabilities is on the list of flaws known to be exploited today.
Bluetooth Core Specification, with 10 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Bluetooth products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.