5.0
Medium
CVE-2021-1684 Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability
Description
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Version 20H2 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server version 20H2 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1803 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1809 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1909 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server, version 1909 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 2004 10.0 | 10.0.0 → latest | No fix stated |
Show the 8 other branches Hide the 8 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server version 2004 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1507 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1607 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2016 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2016 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 8.1 6.3 | 6.3.0 → latest | No fix stated |
| Windows Server 2012 R2 6.3 | 6.3.0 → latest | No fix stated |
| Windows Server 2012 R2 (Server Core installation) 6.3 | 6.3.0 → latest | No fix stated |
References
- Windows Bluetooth Security Feature Bypass Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows 10 Version 20H2
The 1260 CVEs of Windows 10 Version 20H2 →
CVE-2022-44684
Windows Local Session Manager (LSM) Denial of Service Vulnerability
6.5
Medium
CVE-2022-35759
Windows Local Security Authority (LSA) Denial of Service Vulnerability
6.5
Medium
CVE-2022-35758
Windows Kernel Memory Information Disclosure Vulnerability
5.5
Medium
CVE-2022-35757
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
7.3
High