normanluhrmann/infosec

normanluhrmann/infosec

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
#infosec research
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-13702↗
4.3 MEDIUM6.4 MEDIUM

The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart Privacy because there is a secondary temporary UID. An attacker with access to Beacon or IoT networks can seamlessly track individual device movement via a Bluetooth LE discovery mechanism.