CVE-2014-4428
Severity CVSS v4.0:
Pending analysis
Type:
CWE-310
Cryptographic Issues
Publication date:
18/10/2014
Last modified:
29/08/2017
Description
Bluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices, which allows remote attackers to spoof a device by leveraging previous pairing.
Impact
Base Score 2.0
5.40
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | 10.9.5 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
- http://secunia.com/advisories/61825
- http://secunia.com/advisories/61827
- http://www.securityfocus.com/archive/1/533746
- http://www.securityfocus.com/archive/1/533747
- http://www.securityfocus.com/bid/70636
- http://www.securitytracker.com/id/1031063
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97641
- https://support.apple.com/kb/HT6535
- https://support.apple.com/kb/HT6541
- https://support.apple.com/kb/HT6542