CVE-2021-31615 - CVE House
Back to Database
Status published Medium CVE-2021-31615

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications...

Vulnerability Description

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the transmitting device initiates its packet transmission to achieve full MITM status without terminating the link. When applied against devices establishing or using encrypted links, crafted packets may be used to terminate an existing link, but will not compromise the confidentiality or integrity of the link.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31615

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluetooth

View All →
CVE-2022-25837
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may...
Unknown 0
CVE-2022-25836
Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through...
Unknown 0
CVE-2022-24695
Bluetooth Classic in Bluetooth Core Specification through 5.3 does not...
Unknown 0
CVE-2020-35473
An information leakage vulnerability in the Bluetooth Low Energy advertisement...
Unknown 0
CVE-2020-26560
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and...
High 8.1

Affected Vendor

Affected Software

bluetooth core specification
Vulnerable Versions:
4.0

Timeline

Official Publish: June 25th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.