CVE-2021-3658

Published March 2nd, 2022

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

3.3

LOW

Affected

PROJECT

Description

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

bluez/bluez

Main BlueZ tree

GitHub

1.09K