Page 2 - Bluetooth Core News Today : Breaking News, Live Updates & Top Stories | Vimarsana

By Eduard Kovacs on May 25, 2021 Researchers working for a French government agency have identified seven new Bluetooth vulnerabilities that could expose many devices to impersonation and other types of attacks. The flaws, discovered by researchers at France’s national cybersecurity agency ANSSI, affect devices that support the Bluetooth Core and Mesh specifications, which define technical and policy requirements for devices operating over Bluetooth connections. Malicious actors who are within Bluetooth range can exploit the weaknesses to impersonate legitimate devices, according to an adv...

Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

Overview Devices supporting the Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure that could allow an attacker to impersonate a legitimate device during pairing. Description The Bluetooth Core Specification and Mesh Profile Specification are two specifications used to define the technical and policy requirements for devices that want to operate over Bluetooth connections. Researchers at the Agence...

BIAS enables attackers to exploit devices

The two specifications define the technical and policy requirements for devices that want to operate over Bluetooth connections. The Bluetooth Impersonation Attacks, or BIAS, allow attackers to impersonate a device and to establish a secure connection with a victim without possessing the long-term key shared by the impersonated device and the victim. This bypasses Bluetooth's authentication mechanism. "The BIAS attacks are the first uncovering issues related to Bluetooth's secure connection establishment authentication procedures, adversarial role switches, and Secure Connections downgrades...