CVE-2019-2102: High severity tvos vulnerability
Bluetooth. This issue was addressed by disabling accessories with insecure Bluetooth connections. Customers using the Bluetooth Low Energy (BLE) version of the Titan Security Key by Google should review Android’s June Bulletins and Google’s advisory and take appropriate action.
Other sources
In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is theoretically possible for a proximate attacker to remotely inject keystrokes on a paired Android host due to improperly used crypto. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128843052.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8593
- CVE-2019-2102
- CVE-2019-8592
- CVE-2019-8585
- CVE-2019-8582
- CVE-2019-8560
- CVE-2019-8633
- CVE-2019-8576
- CVE-2019-8591
- CVE-2019-8631
- CVE-2019-8568
- CVE-2019-8637
- CVE-2019-8577
- CVE-2019-8600
- CVE-2019-8598
- CVE-2019-8602
- CVE-2019-8574
- CVE-2019-8607
- CVE-2019-6237
- CVE-2019-8571
- CVE-2019-8583
- CVE-2019-8584
- CVE-2019-8586
- CVE-2019-8587
- CVE-2019-8594
- CVE-2019-8595
- CVE-2019-8596
- CVE-2019-8597
- CVE-2019-8601
- CVE-2019-8608
- CVE-2019-8609
- CVE-2019-8610
- CVE-2019-8611
- CVE-2019-8615
- CVE-2019-8619
- CVE-2019-8622
- CVE-2019-8623
- CVE-2019-8628
- CVE-2019-8612
- CVE-2019-8620
- CVE-2019-8603
- CVE-2019-8635
- CVE-2019-8590
- CVE-2019-8640
- CVE-2019-8589
- CVE-2019-8634
- CVE-2019-8616
- CVE-2019-8629
- CVE-2018-4456
- CVE-2019-8606
- CVE-2019-8525
- CVE-2019-8547
- CVE-2019-8573
- CVE-2018-12126
- CVE-2018-12127
- CVE-2018-12130
- CVE-2019-11091
- CVE-2019-8604
- CVE-2019-8569
- CVE-2019-8599
- CVE-2019-8626
- CVE-2019-8613
- CVE-2019-8664
- CVE-2019-8617
- CVE-2019-8630
Frequently Asked Questions
What is CVE-2019-2102?
CVE-2019-2102 is a vulnerability related to Bluetooth Low Energy (BLE) specification that allows a proximate attacker to remotely inject keystrokes on a paired Android host.
What is the severity of CVE-2019-2102?
CVE-2019-2102 has a severity score of 8.8 (high).
Which software and versions are affected by CVE-2019-2102?
CVE-2019-2102 affects macOS Mojave 10.14.5, Apple High Sierra, Apple Sierra, iOS up to 12.3, tvOS up to 12.3, and various versions of Google Android.
How can I fix CVE-2019-2102?
To fix CVE-2019-2102, you need to update your operating system to the latest available version provided by the respective vendors.
Where can I find more information about CVE-2019-2102?
You can find more information about CVE-2019-2102 on the following references: [Link 1](https://support.apple.com/en-us/HT210119), [Link 2](https://support.apple.com/en-us/HT210118), [Link 3](https://support.apple.com/en-us/HT210120).