CVE-2020-12856 Explained : Impact and Mitigation

OpenTrace vulnerability affecting COVIDSafe, TraceTogether, ABTraceTogether, and other applications on iOS and Android.

Understanding CVE-2020-12856

OpenTrace vulnerability allows remote attackers to conduct re-identification attacks due to Bluetooth usage.

What is CVE-2020-12856?

OpenTrace in COVIDSafe v1.0.17 and related apps enables long-term re-identification attacks via Bluetooth.

The Impact of CVE-2020-12856

Remote attackers can conduct long-term re-identification attacks
Potential unspecified impacts due to Bluetooth usage

Technical Details of CVE-2020-12856

OpenTrace vulnerability details and affected systems.

Vulnerability Description

OpenTrace vulnerability in COVIDSafe and related apps
Allows remote attackers to conduct re-identification attacks

Affected Systems and Versions

COVIDSafe through v1.0.17
TraceTogether, ABTraceTogether, and other iOS and Android apps

Exploitation Mechanism

Attackers exploit Bluetooth to conduct long-term re-identification attacks

Mitigation and Prevention

Steps to mitigate the CVE-2020-12856 vulnerability.

Immediate Steps to Take

Update affected applications to the latest secure versions
Avoid using Bluetooth in public places where re-identification attacks are possible

Long-Term Security Practices

Regularly update apps and operating systems for security patches
Be cautious when using Bluetooth in public areas
Implement additional security measures to prevent re-identification attacks

Patching and Updates

Stay informed about security updates for COVIDSafe and related applications
Apply patches promptly to mitigate the OpenTrace vulnerability