Bluetooth bug that leaves devices vulnerable

KNOB attack allows hackers to interfere with the Bluetooth pairing procedure.

Update: 2019-08-18 07:00 GMT
The feature could be leveraged for an item finding solution such as luggage or missing remote to let a user know when the personal property tag is nearby.

Bluetooth SIG, the organisation that oversees the technology's standards, has reportedly issued a security notice about a vulnerability that leaves devices vulnerable to what is called as Key Negotiation of Bluetooth or KNOB attack.

As Engadget reports, the KNOB attack allows hackers to interfere with the Bluetooth pairing procedure by making the connection's encryption key shorter than required. This makes it easier for hackers to intrude and spy on data shared between devices.

The vulnerability affects devices that use Bluetooth BR/EDR or Bluetooth Classic connection. The attack works only if both devices establishing a connection have the vulnerability. Tech giants have already rolled out patches to fix the flaw.

Similar News