Description
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.
See vulnerability B-E3 in the related paper below.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| silabs.com | WiseConnect | 2.0.0 – ≤ 2.*.*, 4.0.0 – ≤ 4.*.* | — |
References
- https://community.silabs.com/068Vm00000x0Yqy vendor-advisory permissions-required
- https://arxiv.org/pdf/2409.02905 related