CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connect and other applications) can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation (e.g., internalCreateBond in BleManagerHandler).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.0%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 3.3

References

Products affected by CVE-2020-15509

Nordicsemi » Android Ble Library » Version: 1.0.0

cpe:2.3:a:nordicsemi:android_ble_library:1.0.0
Nordicsemi » Android Ble Library » Version: 1.1.0

cpe:2.3:a:nordicsemi:android_ble_library:1.1.0
Nordicsemi » Android Ble Library » Version: 1.2.0

cpe:2.3:a:nordicsemi:android_ble_library:1.2.0
Nordicsemi » Android Ble Library » Version: 2.0

cpe:2.3:a:nordicsemi:android_ble_library:2.0
Nordicsemi » Android Ble Library » Version: 2.0.0

cpe:2.3:a:nordicsemi:android_ble_library:2.0.0
Nordicsemi » Android Ble Library » Version: 2.0.1

cpe:2.3:a:nordicsemi:android_ble_library:2.0.1
Nordicsemi » Android Ble Library » Version: 2.0.2

cpe:2.3:a:nordicsemi:android_ble_library:2.0.2
Nordicsemi » Android Ble Library » Version: 2.0.3

cpe:2.3:a:nordicsemi:android_ble_library:2.0.3
Nordicsemi » Android Ble Library » Version: 2.0.4

cpe:2.3:a:nordicsemi:android_ble_library:2.0.4
Nordicsemi » Android Ble Library » Version: 2.0.5

cpe:2.3:a:nordicsemi:android_ble_library:2.0.5
Nordicsemi » Android Ble Library » Version: 2.1.0

cpe:2.3:a:nordicsemi:android_ble_library:2.1.0
Nordicsemi » Android Ble Library » Version: 2.1.1

cpe:2.3:a:nordicsemi:android_ble_library:2.1.1
Nordicsemi » Android Ble Library » Version: 2.2.0

cpe:2.3:a:nordicsemi:android_ble_library:2.2.0
Nordicsemi » Android Ble Library » Version: 2.2.1

cpe:2.3:a:nordicsemi:android_ble_library:2.2.1
Nordicsemi » Dfu Library » Version: 0.6.3

cpe:2.3:a:nordicsemi:dfu_library:0.6.3
Nordicsemi » Dfu Library » Version: 1.10.0

cpe:2.3:a:nordicsemi:dfu_library:1.10.0
Nordicsemi » Dfu Library » Version: 1.10.1

cpe:2.3:a:nordicsemi:dfu_library:1.10.1
Nordicsemi » Dfu Library » Version: 1.10.2

cpe:2.3:a:nordicsemi:dfu_library:1.10.2
Nordicsemi » Dfu Library » Version: 1.10.3

cpe:2.3:a:nordicsemi:dfu_library:1.10.3
Nordicsemi » Dfu Library » Version: 1.10.4

cpe:2.3:a:nordicsemi:dfu_library:1.10.4
Nordicsemi » Dfu Library » Version: 1.2.0

cpe:2.3:a:nordicsemi:dfu_library:1.2.0
Nordicsemi » Dfu Library » Version: 1.3.0

cpe:2.3:a:nordicsemi:dfu_library:1.3.0
Nordicsemi » Dfu Library » Version: 1.3.1

cpe:2.3:a:nordicsemi:dfu_library:1.3.1
Nordicsemi » Dfu Library » Version: 1.4.0

cpe:2.3:a:nordicsemi:dfu_library:1.4.0
Nordicsemi » Dfu Library » Version: 1.4.1

cpe:2.3:a:nordicsemi:dfu_library:1.4.1
Nordicsemi » Dfu Library » Version: 1.4.2

cpe:2.3:a:nordicsemi:dfu_library:1.4.2
Nordicsemi » Dfu Library » Version: 1.4.3

cpe:2.3:a:nordicsemi:dfu_library:1.4.3
Nordicsemi » Dfu Library » Version: 1.5.0

cpe:2.3:a:nordicsemi:dfu_library:1.5.0
Nordicsemi » Dfu Library » Version: 1.5.1

cpe:2.3:a:nordicsemi:dfu_library:1.5.1
Nordicsemi » Dfu Library » Version: 1.5.2

cpe:2.3:a:nordicsemi:dfu_library:1.5.2
Nordicsemi » Dfu Library » Version: 1.6.0

cpe:2.3:a:nordicsemi:dfu_library:1.6.0
Nordicsemi » Dfu Library » Version: 1.6.1

cpe:2.3:a:nordicsemi:dfu_library:1.6.1
Nordicsemi » Dfu Library » Version: 1.7.0

cpe:2.3:a:nordicsemi:dfu_library:1.7.0
Nordicsemi » Dfu Library » Version: 1.8.0

cpe:2.3:a:nordicsemi:dfu_library:1.8.0
Nordicsemi » Dfu Library » Version: 1.8.1

cpe:2.3:a:nordicsemi:dfu_library:1.8.1
Nordicsemi » Dfu Library » Version: 1.9.0

cpe:2.3:a:nordicsemi:dfu_library:1.9.0
Nordicsemi » Dfu Library » Version: 1.9.1

cpe:2.3:a:nordicsemi:dfu_library:1.9.1
Nordicsemi » Dfu Library » Version: 1.9.2

cpe:2.3:a:nordicsemi:dfu_library:1.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15509

Products

Pricing

Contact Us