CVE-2024-20889

Summary

CVE-2024-20889 is a newly disclosed cybersecurity vulnerability affecting Bluetooth Low Energy (BLE) devices. The issue involves improper authentication, allowing adjacent attackers to pair with vulnerable devices before the SMR Jul-2024 Release 1. This vulnerability can potentially lead to unauthorized access, data theft, or manipulation of device functionality. Users and organizations are advised to apply the forthcoming patch as soon as it becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.