Bluetooth flaws allow attackers to impersonate legitimate devices

[LASER_oneXM]

Content source

https://www.bleepingcomputer.com/news/security/bluetooth-flaws-allow-attackers-to-impersonate-legitimate-devices/

Attackers could abuse vulnerabilities discovered in the Bluetooth Core and Mesh Profile specifications to impersonate legitimate devices during the pairing process and launch man-in-the-middle (MitM) attacks.
The Bluetooth Core and Mesh Profile specifications define requirements needed by Bluetooth devices to communicate with each other and for Bluetooth devices using low energy wireless technology to enable interoperable mesh networking solutions.

 

[ForgottenSeer 85179]

It's interesting that Apple isn't affected. At least they're not listed.

Guess that's because of their own airplay.

 

[Stopspying]

New Bluetooth Flaws Let Attackers Impersonate Legitimate Devices

Hackers can impersonate legitimate Bluetooth devices with new Bluetooth flaws

thehackernews.com

"..To confirm that the BIAS attacks are practical, we successfully conduct them against 31 Bluetooth devices (28 unique Bluetooth chips) from major hardware and software vendors, implementing all the major Bluetooth versions, including Apple, Qualcomm, Intel, Cypress, Broadcom, Samsung, and CSR..."