Vulnerabilities > CVE-2020-26560 - Incorrect Authorization vulnerability in Bluetooth Mesh Profile 1.0.0/1.0.1
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |