8.8
High
CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size supported
Description
SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WiseConnect 4.0 | 4.0.0 → < 4.1.0 | 4.1.0 |
| WiseConnect 2.0 | 2.0.0 → < 2.14.0 | 2.14.0 |
Other CVEs of WiseConnect
The 7 CVEs of WiseConnect →
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive…
5.3
Medium
CVE-2026-65935
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key…
7.6
High
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier
8.8
High
CVE-2026-19291
Bluetooth re-pairing with an existing device can use a lower security level
8.8
High