Vulnerabilities > CVE-2021-3658 - Incorrect Authorization vulnerability in multiple products

CVSS 6.5 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

low complexity

bluez

fedoraproject

CWE-863

NVD

Published: 2022-03-02

Updated: 2022-06-03

Summary

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Vulnerable Configurations

Part	Description	Count
Application	Bluez Bluez Bluez - Bluez Bluez 4.0 Bluez Bluez 4.1 Bluez Bluez 4.2 Bluez Bluez 4.3 Bluez Bluez 4.4 Bluez Bluez 4.5 Bluez Bluez 4.6 Bluez Bluez 4.7 Bluez Bluez 4.8 Bluez Bluez 4.9 Bluez Bluez 4.10 Bluez Bluez 4.11 Bluez Bluez 4.12 Bluez Bluez 4.13 Bluez Bluez 4.14 Bluez Bluez 4.15 Bluez Bluez 4.16 Bluez Bluez 4.17 Bluez Bluez 4.18 Bluez Bluez 4.19 Bluez Bluez 4.20 Bluez Bluez 4.21 Bluez Bluez 4.22 Bluez Bluez 4.23 Bluez Bluez 4.24 Bluez Bluez 4.25 Bluez Bluez 4.26 Bluez Bluez 4.27 Bluez Bluez 4.28 Bluez Bluez 4.29 Bluez Bluez 4.30 Bluez Bluez 4.31 Bluez Bluez 4.32 Bluez Bluez 4.33 Bluez Bluez 4.34 Bluez Bluez 4.35 Bluez Bluez 4.36 Bluez Bluez 4.37 Bluez Bluez 4.38 Bluez Bluez 4.39 Bluez Bluez 4.40 Bluez Bluez 4.41 Bluez Bluez 4.42 Bluez Bluez 4.43 Bluez Bluez 4.44 Bluez Bluez 4.45 Bluez Bluez 4.46 Bluez Bluez 4.47 Bluez Bluez 4.48 Bluez Bluez 4.49 Bluez Bluez 4.50 Bluez Bluez 4.51 Bluez Bluez 4.52 Bluez Bluez 4.53 Bluez Bluez 4.54 Bluez Bluez 4.55 Bluez Bluez 4.56 Bluez Bluez 4.57 Bluez Bluez 4.58 Bluez Bluez 4.59 Bluez Bluez 4.60 Bluez Bluez 4.61 Bluez Bluez 4.62 Bluez Bluez 4.63 Bluez Bluez 4.64 Bluez Bluez 4.65 Bluez Bluez 4.66 Bluez Bluez 4.67 Bluez Bluez 4.68 Bluez Bluez 4.69 Bluez Bluez 4.70 Bluez Bluez 4.71 Bluez Bluez 4.72 Bluez Bluez 4.73 Bluez Bluez 4.74 Bluez Bluez 4.75 Bluez Bluez 4.76 Bluez Bluez 4.77 Bluez Bluez 4.78 Bluez Bluez 4.79 Bluez Bluez 4.80 Bluez Bluez 4.81 Bluez Bluez 4.82 Bluez Bluez 4.83 Bluez Bluez 4.84 Bluez Bluez 4.85 Bluez Bluez 4.86 Bluez Bluez 4.87 Bluez Bluez 4.88 Bluez Bluez 4.89 Bluez Bluez 4.90 Bluez Bluez 4.91 Bluez Bluez 4.92 Bluez Bluez 4.93 Bluez Bluez 4.94 Bluez Bluez 4.95 Bluez Bluez 4.96 Bluez Bluez 4.97 Bluez Bluez 4.98 Bluez Bluez 4.99 Bluez Bluez 4.100 Bluez Bluez 4.101 Bluez Bluez 5.0 Bluez Bluez 5.1 Bluez Bluez 5.2 Bluez Bluez 5.3 Bluez Bluez 5.4 Bluez Bluez 5.5 Bluez Bluez 5.6 Bluez Bluez 5.7 Bluez Bluez 5.8 Bluez Bluez 5.9 Bluez Bluez 5.10 Bluez Bluez 5.11 Bluez Bluez 5.12 Bluez Bluez 5.13 Bluez Bluez 5.14 Bluez Bluez 5.15 Bluez Bluez 5.16 Bluez Bluez 5.17 Bluez Bluez 5.18 Bluez Bluez 5.19 Bluez Bluez 5.20 Bluez Bluez 5.21 Bluez Bluez 5.22 Bluez Bluez 5.23 Bluez Bluez 5.24 Bluez Bluez 5.25 Bluez Bluez 5.26 Bluez Bluez 5.27 Bluez Bluez 5.28 Bluez Bluez 5.29 Bluez Bluez 5.30 Bluez Bluez 5.31 Bluez Bluez 5.32 Bluez Bluez 5.33 Bluez Bluez 5.34 Bluez Bluez 5.35 Bluez Bluez 5.36 Bluez Bluez 5.37 Bluez Bluez 5.38 Bluez Bluez 5.39 Bluez Bluez 5.40 Bluez Bluez 5.41 Bluez Bluez 5.42 Bluez Bluez 5.43 Bluez Bluez 5.44 Bluez Bluez 5.45 Bluez Bluez 5.46 Bluez Bluez 5.47 Bluez Bluez 5.48 Bluez Bluez 5.49 Bluez Bluez 5.50 Bluez Bluez 5.51 Bluez Bluez 5.52 Bluez Bluez 5.53 Bluez Bluez 5.54 Bluez Bluez 5.55 Bluez Bluez 5.56 Bluez Bluez 5.57 Bluez Bluez 5.58 Bluez Bluez 5.59 Bluez Bluez 5.60	164
OS	Fedoraproject Fedoraproject Fedora 34	1

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References