Total vulnerabilities in the database
Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.
| Software | From | Fixed in |
|---|---|---|
| bluetooth / bluetooth_core_specification | 4.2 | 5.4.x |
| microsoft / windows_10_22h2 | - | 10.0.19045.3693 |
| microsoft / windows_11_21h2 | - | 10.0.22000.2600 |
| microsoft / windows_11_22h2 | - | 10.0.22621.2715 |
| microsoft / windows_11_23h2 | - | 10.0.22631.2715 |
| microsoft / windows_server_2022_23h2 | - | 10.0.25398.531 |
| microsoft / windows_10_21h2 | - | 10.0.19043.3693 |
| microsoft / windows_10_1809 | - | 10.0.17763.5122 |
| microsoft / windows_server_2019 | - | 10.0.17763.5122 |
| microsoft / windows_server_2022 | - | 10.0.20348.2113 |