CVE-2020-26558

Published: May 24, 2021Modified: Nov 4, 2025

4.2

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.6 / Impact: 2.5

Source: NVD

Description

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.

Affected (19)

Products: Bluetooth: Bluetooth Core Specification · Fedoraproject: Fedora · Debian: Debian Linux · +2 more

Show all products

Bluetooth

1 product

Bluetooth Core Specification

1 product

1 product

1 product

15 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bluetooth Bluetooth Core Specification	From 2.1 to 5.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 5.13

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax210 Firmware	All versions

Running on/with	Platform Versions
Intel Ax210	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax201 Firmware	All versions

Running on/with	Platform Versions
Intel Ax201	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax200 Firmware	All versions

Running on/with	Platform Versions
Intel Ax200	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9560 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9560	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9462 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9462	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9461 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9461	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9260 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 9260	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 8265 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 8265	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 8260 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 8260	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 3168 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 3168	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 7265 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 7265	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 3165 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 3165	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax1675 Firmware	All versions

Running on/with	Platform Versions
Intel Ax1675	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax1650 Firmware	All versions

Running on/with	Platform Versions
Intel Ax1650	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 1550 Firmware	All versions

Running on/with	Platform Versions
Intel Ac 1550	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (21)

https://kb.cert.org/vuls/id/799380

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202209-16

Source: cve@mitre.org

Third Party Advisory

https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/

Source: cve@mitre.org

Vendor Advisory

https://www.debian.org/security/2021/dsa-4951

Source: cve@mitre.org

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html

Source: cve@mitre.org

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html

Source: cve@mitre.org

Third Party Advisory

https://kb.cert.org/vuls/id/799380