Description
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
silabs.com WiseConnect
Default version status: unaffected
4.0.0 to < 4.1.0affected2.0.0 to < 2.14.0affected
References
- https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes ↗
- https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes ↗
- https://community.silabs.com/068Vm00000x0yyH ↗
- https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/ ↗