CVE-2018-5383
Medium
Description
Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Google Android
PublishedAug 7, 2018
First seenAug 7, 2018
Weakness typeCWE-325CWE-325
How to fix
Update
- ti wl18xx_bluetooth_service_pack4.3 or later
- apple iphone_os11.4 or later
- apple mac_os_x10.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google android | 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 | — |
| ti wl18xx_bluetooth_service_pack | v < 4.3 | 4.3 |
| apple iphone_os | v < 11.4 | 11.4 |
| apple mac_os_x | v < 10.13 | 10.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.