BLUFFS — Bluetooth vulnerabilities allowing for MITM attacks
Daniele Antonioli, a Bluetooth security researcher who previously developed attack techniques like BIAS, BLUR, and KNOB, has identified two new vulnerabilities (CVE-2023-24023) in the Bluetooth session negotiation mechanism, affecting all Bluetooth implementations that support the 'Secure Connections' and 'Secure Simple Pairing' secure pairing modes, corresponding to Bluetooth Core specifications 4.2-5.4. To demonstrate practical applications of these vulnerabilities, six attack variants were developed, […]
