Cisco warns about public exploit code for critical flaws in its 220 Series smart switches
60
CVE-2019-9506
—CVSS 3.1
8.1 high
EPSS
3%p85
Published
()
Modified
Description
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
In the news6 stories
60
60
60
47
35