cvedb.io
CVE-2021-3658
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2022-03-02T23:15:08.787 · Last modified 2026-06-17T04:05:31.110

Summary

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Affected products

bluez — bluez

Does this affect you?

Add your gear to cvedb and we'll alert you only when bluez ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.