CVE-2020-0556

high

Description

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html

https://security.gentoo.org/glsa/202003-49

https://www.debian.org/security/2020/dsa-4647

https://usn.ubuntu.com/4311-1/

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html

https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html

Details

Source: MITRE

Published: 2020-03-12

Updated: 2022-04-22

Type: NVD-CWE-noinfo

Risk Information

CVSS v2

Base Score: 5.8

Vector: AV:A/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 6.5

Severity: MEDIUM

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Impact Score: 3.7

Exploitability Score: 2.8

Severity: HIGH