CVE-2018-10910
- State
- Published
- Severity
- 4.5 Medium
- Published
- Jan 28, 2019
- Updated
- Aug 5, 2024
- Reserved
- May 9, 2018
Description
A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 4.5 Medium | CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
bluezThe Bluez Project |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.