CVE-2020-26555 - CVE House
Back to Database
Status published Medium CVE-2020-26555

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification...

Vulnerability Description

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26555

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluetooth

View All →
CVE-2022-25837
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may...
Unknown 0
CVE-2022-25836
Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through...
Unknown 0
CVE-2022-24695
Bluetooth Classic in Bluetooth Core Specification through 5.3 does not...
Unknown 0
CVE-2021-31615
Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications...
Medium 5.3
CVE-2020-35473
An information leakage vulnerability in the Bluetooth Low Energy advertisement...
Unknown 0

Affected Vendor

Affected Software

bluetooth core specification, fedora, ax210 firmware, ax201 firmware, ax200 firmware, ac 9560 firmware, ac 9462 firmware, ac 9461 firmware, ac 9260 firmware, ac 8265 firmware, ac 8260 firmware, ac 3168 firmware, ac 7265 firmware, ac 3165 firmware, killer wi-fi 6e ax1675 firmware, killer wi-fi 6 ax1650 firmware, killer ac 1550 firmware
Vulnerable Versions:
1.1b, 34

Timeline

Official Publish: May 24th, 2021
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.