CVE-2021-37577

Summary

CVE-2021-37577 is a vulnerability affecting Bluetooth Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specifications 2.1 through 5.3. An unauthenticated man-in-the-middle attacker can exploit this issue by reflecting a crafted public key and authentication evidence from the initiating device. By doing so, the attacker can potentially identify the Passkey used during pairing and complete authenticated pairing with the responding device, gaining unauthorized access. This vulnerability is similar to CVE-2020-26558.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.