Description
Bluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices, which allows remote attackers to spoof a device by leveraging previous pairing.
References
- https://support.apple.com/kb/HT6542
- https://support.apple.com/kb/HT6541
- 61827 third-party-advisory
- APPLE-SA-2014-10-16-1 vendor-advisory
- 1031063 vdb-entry
- https://support.apple.com/kb/HT6535
- macosx-cve20144428-sec-bypass(97641) vdb-entry
- APPLE-SA-2014-10-20-2 vendor-advisory
- 61825 third-party-advisory
- APPLE-SA-2014-10-20-1 vendor-advisory
- 70636 vdb-entry