vulnwire
6.5med

CVE-2018-16265

The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing p…

Published 6 y ago · modified 4 mo ago · JSON

CVSS
6.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 48%
Public exploits
0
none known

The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Exploit prediction (EPSS)

0.59% probability of exploitation in the next 30 days, higher than 48% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.16.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD2.03.3AV:A/AC:L/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

  • media.defcon.org /DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi% · x_refsource_MISC, x_transferred
  • review.tizen.org /git/?p=platform/core/connectivity/bluetooth-frwk.git%3Ba=commit%3Bh=074dfc9709d8cee84564f · x_refsource_MISC, x_transferred
  • review.tizen.org /git/?p=platform/core/connectivity/bluetooth-frwk.git%3Ba=commit%3Bh=bafbd66906ae5712874dc · x_refsource_MISC, x_transferred
  • youtube.com /watch?v=3IdgBwbOT-g&feature=youtu.be · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.