SB2017091230 - Microsoft Bluetooth Driver Spoofing Vulnerability
Published: September 12, 2017
Security Bulletin ID
SB2017091230
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Adjecent network
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Spoofing (CVE-ID: CVE-2017-8628)
A remote attacker can perform spoofing attack.A spoofing vulnerability exists in Microsoft's implementation of the Bluetooth stack. An attacker can perform a MitM (Man-in-the-Middle) attack and force a user's computer to unknowingly route traffic through the attacker's computer. The attacker can then monitor and read the traffic before sending it on to the intended recipient.
Remediation
Install update from vendor's website.