High severity8.8NVD Advisory· Published Aug 31, 2020· Updated Jun 17, 2026
CVE-2020-13593
CVE-2020-13593
Description
The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radio range can achieve arbitrary read/write access to protected GATT service data, cause a denial of service, or possibly control a device's function by establishing an encrypted session with an unauthenticated Long Term Key (LTK).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ti:simplelink-cc2640r2_software_development_kit:*:*:*:*:*:*:*:*Range: <=2.2.3
- Texas Instruments/SIMPLELINK-CC2640R2-SDKdescription
- Range: <=2.2.3
Patches
Vulnerability mechanics
References
3- www.ti.com/tool/BLE-STACKnvdVendor Advisory
- asset-group.github.io/cves.htmlnvdThird Party Advisory
- asset-group.github.io/disclosures/sweyntooth/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.