7.6
Élevée
CVE-2026-65935 Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key…
Description
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WiseConnect 4.0 | 4.0.0 → dernières | Pas de correctif indiqué |
| WiseConnect 2.0 | 2.0.0 → dernières | Pas de correctif indiqué |
Autres CVE de WiseConnect
Les 7 CVE de WiseConnect →
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive…
5.3
Moyenne
CVE-2026-19293
SMP security request (from peripheral) does not include the maximum
encryption key size supported
8.8
Élevée
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier
8.8
Élevée
CVE-2026-19291
Bluetooth re-pairing with an existing device can use a lower security level
8.8
Élevée