CVE-2017-17860

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone

CVSS v3.0

5.7 MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2.0

5.7 MEDIUMAV:A/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.29% chance of exploitation in the next 30 days, 21th percentile

Published

2018-01-18

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://drive.google.com/open?id=0B5L-0MoH_v7fcGljUS1SYnlkOHM

References

• CVE Record
• NVD entry

Related

• CVE-2017-17849
• CVE-2017-17867
• CVE-2017-17837
• CVE-2017-17868
• CVE-2017-17832
• CVE-2017-17869