CVE-2019-9506

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

CVSS v3.1

8.1 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v3.0

7.6 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CVSS v2.0

4.8 MEDIUMAV:A/AC:L/Au:N/C:P/I:P/A:N

EPSS

2.69% chance of exploitation in the next 30 days, 85th percentile

Published

2019-08-14

Updated

2024-09-16

Proof-of-concept exploits (2)

• francozappa/knob186★ · 2022-04-04
• u10427687/bluetooth-KNOB0★ · 2021-04-20

References

• CVE Record
• NVD entry

Related

• CVE-2019-9501
• CVE-2019-9511
• CVE-2019-9500
• CVE-2019-9535
• CVE-2019-9491
• CVE-2019-9543