Standard attack pattern
Draft
CAPEC-668: Key Negotiation of Bluetooth Attack (KNOB)
An adversary can exploit a flaw in Bluetooth key negotiation allowing them to decrypt information sent between two devices communicating via Bluetooth. The adversary uses an Adversary in the Middle setup to modify packets sent between the two devices during the authentication process, specifically the entropy bits. Knowledge of the number of entropy bits will allow the attacker to easily decrypt information passing over the line of communication.
High
Typical severity
Per MITRE
Low
Likelihood of attack
Per MITRE
3
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-668 (Key Negotiation of Bluetooth Attack (KNOB)) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.