Description
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
silabs.com WiseConnect
Default version status: unaffected
4.0.0 to < 4.1.0affected2.0.0 to < 2.14.0affected
References
- https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes ↗
- https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes ↗
- https://community.silabs.com/068Vm00000x0yyH ↗
- https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/ ↗