8.8
Élevée
CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size supported
Description
SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WiseConnect 4.0 | 4.0.0 → < 4.1.0 | 4.1.0 |
| WiseConnect 2.0 | 2.0.0 → < 2.14.0 | 2.14.0 |
Autres CVE de WiseConnect
Les 7 CVE de WiseConnect →
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive…
5.3
Moyenne
CVE-2026-65935
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key…
7.6
Élevée
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier
8.8
Élevée
CVE-2026-19291
Bluetooth re-pairing with an existing device can use a lower security level
8.8
Élevée