CVE-2021-1638
Published: 12 January 2021
Summary
CVE-2021-1638 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.7 (High).
Operationally, ranked in the top 29.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-7105
Vulnerability details
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts…
more
to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.