CVE-2022-24695

Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. By conducting an efficient over-the-air attack, an attacker can fully extract the permanent, unique Bluetooth MAC identifier, along with device capabilities and identifiers, some of which may contain identifying information about the device owner. This additionally allows the attacker to establish a connection to the target device.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sp2023.ieee-security.org/program-papers.html	Technical Description
https://www.bluetooth.com/specifications/specs/core-specification/	Product
https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM	Technical Description
https://sp2023.ieee-security.org/program-papers.html	Technical Description
https://www.bluetooth.com/specifications/specs/core-specification/	Product
https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM	Technical Description

Configurations

Configuration 1 (hide)

cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:*

History

10 Jan 2025, 19:15

Type	Values Removed	Values Added
CWE		CWE-203

Information

Published : 2023-06-02 12:15

Updated : 2025-01-10 19:15

NVD link : CVE-2022-24695

Mitre link : CVE-2022-24695

CVE.ORG link : CVE-2022-24695

JSON object : View

Products Affected

bluetooth

bluetooth_core_specification

CWE

NVD-CWE-noinfo CWE-203

Observable Discrepancy

{"id": "CVE-2022-24695", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2023-06-02T12:15:09.243", "references": [{"url": "https://sp2023.ieee-security.org/program-papers.html", "tags": ["Technical Description"], "source": "cve@mitre.org"}, {"url": "https://www.bluetooth.com/specifications/specs/core-specification/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM", "tags": ["Technical Description"], "source": "cve@mitre.org"}, {"url": "https://sp2023.ieee-security.org/program-papers.html", "tags": ["Technical Description"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.bluetooth.com/specifications/specs/core-specification/", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM", "tags": ["Technical Description"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-203"}]}], "descriptions": [{"lang": "en", "value": "Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. By conducting an efficient over-the-air attack, an attacker can fully extract the permanent, unique Bluetooth MAC identifier, along with device capabilities and identifiers, some of which may contain identifying information about the device owner. This additionally allows the attacker to establish a connection to the target device."}], "lastModified": "2025-01-10T19:15:28.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCCC35EA-8333-4124-86D4-067279AC7613", "versionEndIncluding": "5.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}