Bluetooth Devices Vulnerable to AuthValue Disclosure

This article has been indexed from Softpedia News / Security

The Bluetooth core and mesh profile specifications may be exploited by cybercriminals as legit devices and perform man-in-the-middle (Mit-) attacks.  

According to the Carnegie Mellon CERT Coordination Center, “Devices supporting the Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure that could allow an attacker to impersonate a legitimate device during pairing”.

The two Bluetooth specifications ensure the protocol for many-to-many Bluetooth communications and enable the sharing of data through ad-hoc networks between devices. 

Bluetooth Impersonation AttackS, also called BIAS, allows a cybercriminal to create a safe connection with a victim and effectively bypass the authentication mechanism of Bluetooth. 

According to the security researchers, the first problems associated with the safe establishment of

Read the original article: Bluetooth Devices Vulnerable to AuthValue Disclosure