CVE-2023-4258

Summary

CVE-2023-4258 is a vulnerability affecting Bluetooth mesh implementations. During the provisioning process, if a provisionee has a publicly known out-of-band (OOB) key, it can be sent back by an attacker and accepted, potentially allowing unauthorized access to the mesh network. This issue raises security concerns as OOB keys are intended to provide secure communication channels, and their compromise could lead to serious network breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.