CVE-2022-25836 Details

A vulnerability exists in Bluetooth Low Energy (LE) pairing within Bluetooth Core Specification versions 4.0 through 5.3. This issue may allow an unauthenticated man-in-the-middle (MITM) attacker to intercept and acquire credentials from two pairing devices. The vulnerability arises when the MITM negotiates different pairing methods with the devices: Legacy Passkey Pairing with the Initiator and Secure Connections Passkey Pairing with the Responder. By brute-forcing the Passkey entered by the user into the Initiator, the MITM can use the identified Passkey to complete the authentication process with the Responder, exploiting the confusion between the two pairing methods.