CVE-2022-24695

Summary

CVE-2022-24695 is a vulnerability affecting Bluetooth Classic in the Bluetooth Core Specification up to version 5.3. The issue lies in the inadequate concealment of device information for Bluetooth transceivers in Non-Discoverable mode. An attacker can exploit this flaw through an over-the-air attack to fully extract the permanent, unique Bluetooth MAC identifier and additional device capabilities and identifiers, potentially revealing sensitive information about the device owner. This vulnerability enables an attacker to establish a connection to the targeted device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.