CVE-2020-12352

PoC —

CVSS 3.1

6.5 medium

EPSS

6%p93

Published

Nov 23, 2020 (Nov 23, 2020)

Modified

Jun 17, 2026

Description

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Vendors: linux
Products: linux kernel
Weakness: CWE-909
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.7%)

In the news3 stories

Google researcher found BleedingTooth flaws in Linux Bluetooth

Security AffairsOct 14, 21:51 UTC · Oct 14, 2020Exploit / PoC CVE-2020-12351 CVE-2020-12352 CVE-2020-24490

60

October 2020 Patch Tuesday: Microsoft fixes potentially wormable Windows TCP/IP RCE flaw

Help Net SecurityOct 13, 00:00 UTC · Oct 13, 2020Vulnerability in the wildCVE-2020-16898 CVE-2020-16947 CVE-2020-16909+7 CVEs

60

Google Warns of Zero-Click Bluetooth Flaws in Linux

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2020Vulnerability CVE-2020-12351 CVE-2020-12352 CVE-2020-24490

35