BLUFFS — vulnerabilities in Bluetooth that allow for MITM attacks
Daniele Antonioli, a Bluetooth security researcher who previously developed the BIAS, BLUR, and KNOB attack techniques, has identified two new vulnerabilities (CVE-2023-24023) in the Bluetooth session negotiation mechanism. These affect all Bluetooth implementations that support the 'Secure Connections' and 'Secure Simple Pairing' secure pairing modes, as defined in the Bluetooth Core specifications from 4.2 to 5.4. To demonstrate the practical application of these vulnerabilities, six attack variations have been developed, […]
