CVE-2020-26555

Published: May 24, 2021Modified: Nov 4, 2025

5.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

Affected (17)

Products: Bluetooth: Bluetooth Core Specification · Fedoraproject: Fedora · Intel: Ax210 Firmware, Ax201 Firmware, Ax200 Firmware, Ac 9560 Firmware, Ac 9462 Firmware, Ac 9461 Firmware, Ac 9260 Firmware, Ac 8265 Firmware, Ac 8260 Firmware, Ac 3168 Firmware, Ac 7265 Firmware, Ac 3165 Firmware, Killer Wi Fi 6e Ax1675 Firmware, Killer Wi Fi 6 Ax1650 Firmware, Killer Ac 1550 Firmware

Bluetooth

1 product

Bluetooth Core Specification

1 product

15 products

Killer Wi Fi 6e Ax1675 Firmware

Killer Wi Fi 6 Ax1650 Firmware

Killer Ac 1550 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bluetooth Bluetooth Core Specification	From 1.1b to 5.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax210 Firmware	All versions

Running on/with	Platform Versions
Intel Ax210	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax201 Firmware	All versions

Running on/with	Platform Versions
Intel Ax201	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax200 Firmware	All versions

Running on/with	Platform Versions
Intel Ax200	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9560 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9560	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9462 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9462	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9461 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9461	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9260 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9260	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 8265 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 8265	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 8260 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 8260	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 3168 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 3168	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 7265 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 7265	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 3165 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 3165	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Wi Fi 6e Ax1675 Firmware	All versions

Running on/with	Platform Versions
Intel Killer Wi Fi 6e Ax1675	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Wi Fi 6 Ax1650 Firmware	All versions

Running on/with	Platform Versions
Intel Killer Wi Fi 6 Ax1650	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Ac 1550 Firmware	All versions

Running on/with	Platform Versions
Intel Killer Ac 1550	All versions

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (9)

https://kb.cert.org/vuls/id/799380

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/

Source: cve@mitre.org

https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/

Source: cve@mitre.org

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html

Source: cve@mitre.org

Third Party Advisory

https://kb.cert.org/vuls/id/799380