CVE-2025-62235
Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing
概要
Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Authentication Bypass by Spoofing vulnerability in Apache NimBLE.
Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor.
This issue affects Apache NimBLE: through 1.8.0.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- patch github.com
- web openwall.com