WiseConnect vulnerabilities
3 known vulnerabilities in WiseConnect from Silabs.com. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
3vulnerabilities
0critical
3high
0exploited
8.4average CVSS score
Latest first
- 7.6 High severity
WiseConnect: Authentication Bypass by Primary Weakness
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
- 8.8 High severity
WiseConnect: Weak Password Requirements
SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below.
- 8.8 High severity
WiseConnect: Authentication Bypass by Primary Weakness
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.