← Database

CVE-2023-24023

MEDIUM CVSS: 6.8 Published: 2023-11-28 Modified: 2026-06-17

Description

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

Affected Platforms

Microsoft Windows 11 21H2Microsoft Windows 10 21H2Microsoft Windows Server 2019Microsoft Windows 10 22H2Bluetooth Bluetooth Core SpecificationMicrosoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2022 23H2Microsoft Windows 11 23H2Microsoft Windows 11 22H2

Weakness Type

NVD-CWE-noinfo

References