CVE-2020-6616 | Vulnetix

CVE-2020-6616 PUBLISHED CVSS 6.5 MEDIUM

Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).

EPSS 0.73% · 52.5th percentile

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

0.73%

52.5th percentile

Affected Products

Vendor	Product	Versions
apple	iphone_os	0
n/a	n/a	*
apple	ipados	0
apple	mac_os_x	10.13.6, 10.13.6, 10.13.6
google	android

Timeline

May 8, 2020 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 25, 2021 EPSS Score
Dec 30, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 3, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 5, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Nov 12, 2022 EPSS Score

References

https://support.apple.com/HT211168 url
https://security.samsungmobile.com/securityUpdate.smsb url
https://support.apple.com/kb/HT211100 url
http://bluetooth.lol url
https://media.ccc.de/v/DiVOC-6-finding_eastereggs_in_broadcom_s_bluetooth_random_number_generator url
https://twitter.com/naehrdine/status/1255981245147877377 url
https://github.com/seemoo-lab/internalblue/blob/master/doc/rng.md url
https://twitter.com/naehrdine/status/1255980443368919045 url
https://support.apple.com/kb/HT211168 url
20200529 APPLE-SA-2020-05-26-1 iOS 13.5 and iPadOS 13.5 mailing-list
https://nvd.nist.gov/vuln/detail/CVE-2020-6616 advisory

Open in Interactive Console →