8.8
Élevée
CVE-2026-16101 Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device
Description
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WiseConnect 4.0 | 4.0.0 → < 4.1.0 | 4.1.0 |
| WiseConnect 2.0 | 2.0.0 → < 2.14.0 | 2.14.0 |
Autres CVE de WiseConnect
Les 7 CVE de WiseConnect →
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive…
5.3
Moyenne
CVE-2026-65935
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key…
7.6
Élevée
CVE-2026-19293
SMP security request (from peripheral) does not include the maximum
encryption key size supported
8.8
Élevée
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier
8.8
Élevée