Unrated severityNVD Advisory· Published May 24, 2021· Updated Nov 4, 2025

CVE-2020-26559

Description

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bluetooth/Bluetooth Mesh profiledescription
Bluetooth SIG/Bluetooth Mesh profilellm-fuzzy
Range: 1.0, 1.0.1

Patches

Vulnerability mechanics

References

kb.cert.org/vuls/id/799380mitrex_refsource_MISC
www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000