CVE-2021-37577

A flaw was found in Bluetooth Core Specifications. This vulnerability allows an unauthenticated attacker to perform a man-in-the-middle attack and determine the Passkey used during pairing via reflection of crafted public keys and authentication evidence, potentially enabling the attacker to complete authenticated pairing with responding devices.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.