CVE-2020-26559 - CVE House
Back to Database
Status published High CVE-2020-26559

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and...

Vulnerability Description

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26559

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluetooth

View All →
CVE-2022-25837
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may...
Unknown 0
CVE-2022-25836
Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through...
Unknown 0
CVE-2022-24695
Bluetooth Classic in Bluetooth Core Specification through 5.3 does not...
Unknown 0
CVE-2021-31615
Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications...
Medium 5.3
CVE-2020-35473
An information leakage vulnerability in the Bluetooth Low Energy advertisement...
Unknown 0

Affected Vendor

Affected Software

mesh profile
Vulnerable Versions:
1.0.0, 1.0.1

Timeline

Official Publish: May 24th, 2021
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.