Описание
btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via crafted Bluetooth packets after the tapping of a crafted NFC tag.
Уязвимые конфигурации
Конфигурация 1Версия до 5.1 (исключая)
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00147
Низкий
8.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
github
больше 3 лет назад
btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via crafted Bluetooth packets after the tapping of a crafted NFC tag.
EPSS
Процентиль: 35%
0.00147
Низкий
8.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-863