CVE-2020-10135

MEDIUM Year: 2020
CVSS v3 Score
5.4
Medium
CVSS v2 Score
4.8
Medium
Weakness Type
CWE-757
View all →

Vulnerability Description

Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key.

Related Vulnerabilities

CVE-2019-16791

MEDIUM
CVSS:5.9(Medium)

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

CWE-7572019

CVE-2020-16200

MEDIUM
CVSS:6.5(Medium)

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influen...

CWE-7572020

CVE-2021-36326

MEDIUM
CVSS:6.5(Medium)

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticated attacker could potentially exploit this vulnerability, l...

CWE-7572021

CVE-2024-20069

MEDIUM
CVSS:6.5(Medium)

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional executio...

CWE-7572024

CVE-2017-9269

CRITICAL
CVSS:9.8(Critical)

In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malic...

CWE-7572017

CVE-2024-38883

CRITICAL
CVSS:9.1(Critical)

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attack due to the selectio...

CWE-7572024