CVE-2022-25836 - CVE House
Back to Database
Status published Unknown CVE-2022-25836

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through...

Vulnerability Description

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when the MITM negotiates Legacy Passkey Pairing with the pairing Initiator and Secure Connections Passkey Pairing with the pairing Responder and brute forces the Passkey entered by the user into the Initiator. The MITM attacker can use the identified Passkey value to complete authentication with the Responder via Bluetooth pairing method confusion.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-25836

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluetooth

View All →
CVE-2022-25837
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may...
Unknown 0
CVE-2022-24695
Bluetooth Classic in Bluetooth Core Specification through 5.3 does not...
Unknown 0
CVE-2021-31615
Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications...
Medium 5.3
CVE-2020-35473
An information leakage vulnerability in the Bluetooth Low Energy advertisement...
Unknown 0
CVE-2020-26560
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and...
High 8.1

Affected Vendor

Affected Software

bluetooth core specification
Vulnerable Versions:
4.0

Timeline

Official Publish: December 12th, 2022
Last Modified: April 22nd, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.