CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.

Link	Resource
https://kb.cert.org/vuls/id/799380	Third Party Advisory US Government Resource
https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/	Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/	Mailing List Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html	Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html	Mailing List Third Party Advisory
https://www.debian.org/security/2021/dsa-4951	Third Party Advisory
https://security.gentoo.org/glsa/202209-16	Third Party Advisory

Configuration 1

cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

---

Published : 2021-05-24 06:15

Updated : 2022-11-16 04:38

---

NVD link : CVE-2020-26558

Mitre link : CVE-2020-26558

Ac 9560 Firmware

Intel

CWE-287