Wednesday, March 2, 2022

Huawei EulerOS: CVE-2021-3658: bluez security update

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
Solution(s)
huawei-euleros-2_0_sp10-upgrade-bluez-help


Referenceshttps://attackerkb.com/topics/cve-2021-3658
CVE - 2021-3658
EulerOS-SA-2022-1219