Dismiss this notice
Avast Premier Photo Caption - [Only registered and activated users can see links Click here to register]

Dismiss this notice
FastestVPN Accounts Giveaway - [Only registered and activated users can see links Click here to register]


Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
New Bluetooth Vulnerability Allows Attackers to Intercept Traffic
#1
Quote:A KNOB (key negotiation of Bluetooth) attack against the basic rate/enhanced data rate (BR/EDR, or Bluetooth Classic) configuration can result in information disclosure and/or escalation of privileges.
 
The vulnerability was discovered by researchers at the Center for IT-Security, Privacy and Accountability (CISPA), and reported to Bluetooth. Bluetooth published an [Only registered and activated users can see links Click here to register] and Microsoft [Only registered and activated users can see links Click here to register] in the August 2019 updates. But patching Windows does not mean the Bluetooth issue is solved.
 
In its own Vulnerability Note [Only registered and activated users can see links Click here to register], CERT/CC has explained the vulnerability and designated it as CVE-2019-9506 with a CVSS score of 9.3. The vulnerability is based on the process by which communicating Bluetooth devices decide on and establish an encryption key length. This can be anything between one and 16 bytes of entropy. One byte provides an encryption key so small that it can be brute forced by an attacker.
 
Microsoft patched Windows Bluetooth with "a software update that enforces a default 7-octet minimum key length to ensure that the key negotiation does not trivialize the encryption." However, this is not set by default and must be enabled by the user setting a flag in the registry. Unless this flag is set, Windows Bluetooth will remain susceptible to the vulnerability.

Read more here: [Only registered and activated users can see links Click here to register]
[-] The following 1 user Likes silversurfer's post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
GFYI [Official] FastestVPN Accounts Giv...
"WHY do you wan...sgx — 04:35
GFYI [Official] FastestVPN Accounts Giv...
Thanks jason for thi...ismail — 20:07
GFYI [Official] FastestVPN Accounts Giv...
Thank you for the op...Raur — 19:01
Macrorit Disk Scanner Pro Plus Edition [...
A program to chec...ismail — 16:31
FastMove v 1.2019.807 [for PC]
Move your files...ismail — 16:21

[-]
Birthdays
Today's Birthdays
avatar (35)Isabelle88Nes
avatar (35)ferpuMip
avatar (32)kinotExaro
avatar (44)HerbertPab
Upcoming Birthdays
avatar (33)emogig
avatar (33)JasonSoult

[-]
Online Staff
There are no staff members currently online.

>