virus logo FortiClient Vulnerability

Microsoft CVE-2019-9506 Encryption Key Negotiation of Bluetooth Vulnerability

description-logoDescription

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

affected-products-logoAffected Applications

Windows RT 8.1
Windows Server version 1903 (Server Core installation)
Windows Server 2016
Windows Server version 1803 (Server Core Installation)
Windows Server 2012
Windows 8
Windows 7
Windows 10
Windows Server 2008
Windows Server 2019

CVE References

CVE-2019-9506

Other References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-9506
ID 59227
Created Aug 13, 2019
Description
Updated		 Mar 19, 2024
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Microsoft
Patch auto
Application Windows RT 8.1 , Windows Server version 1903 (Server Core installation) , Windows Server 2016 , Windows Server version 1803 (Server Core Installation) , Windows Server 2012 , Windows 8 , Windows 7 , Windows 10 , Windows Server 2008 , Windows Server 2019