CVE-2020-14292
In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the…
Does this matter?
Lower severity and a low EPSS score (1.31%). Track it; it rarely justifies an emergency change on its own.
Description
In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone without authorisation, bypassing the Bluetooth address randomisation protection in the user's phone.
- CVSS 3.1
- 5.7 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 1.31% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- health/covidsafe
- Source
- cve@mitre.org
References
- https://covidsafe.watch/issue-register/Vendor Advisory
- https://github.com/AU-COVIDSafe/mobile-android/blob/b827cf3ccef72a3d38c6fc37466a99868823540f/app/src/main/java/au/gov/health/covidsafe/streetpass/Work.kt#L35-L41Exploit, Third Party Advisory
- https://github.com/alwentiu/CVE-2020-14292Exploit, Third Party Advisory
- https://www.health.gov.au/resources/apps-and-tools/covidsafe-appProduct, Third Party Advisory
- https://covidsafe.watch/issue-register/Vendor Advisory
- https://github.com/AU-COVIDSafe/mobile-android/blob/b827cf3ccef72a3d38c6fc37466a99868823540f/app/src/main/java/au/gov/health/covidsafe/streetpass/Work.kt#L35-L41Exploit, Third Party Advisory
- https://github.com/alwentiu/CVE-2020-14292Exploit, Third Party Advisory
- https://www.health.gov.au/resources/apps-and-tools/covidsafe-appProduct, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.