CVE-2020-13593 : Security Advisory and Response

Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows for potential security vulnerabilities.

Understanding CVE-2020-13593

This CVE identifies a vulnerability in the Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through version 2.2.3.

What is CVE-2020-13593?

The vulnerability allows an attacker in radio range to bypass the Diffie-Hellman check during Secure Connection pairing, potentially leading to unauthorized access to GATT service data, denial of service, or device function manipulation.

The Impact of CVE-2020-13593

The exploitation of this vulnerability can result in arbitrary read/write access to protected GATT service data, denial of service attacks, or potential control over a device's function through an encrypted session with an unauthenticated Long Term Key (LTK).

Technical Details of CVE-2020-13593

This section provides more in-depth technical insights into the CVE.

Vulnerability Description

The vulnerability in the Bluetooth Low Energy Secure Manager Protocol (SMP) implementation allows the Diffie-Hellman check to be skipped during Secure Connection pairing, enabling unauthorized access and potential manipulation of device functions.

Affected Systems and Versions

Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through version 2.2.3

Exploitation Mechanism

An attacker within radio range can exploit the vulnerability by establishing an encrypted session with an unauthenticated Long Term Key (LTK), bypassing the necessary security checks.

Mitigation and Prevention

Protecting systems from CVE-2020-13593 requires immediate actions and long-term security practices.

Immediate Steps to Take

Implement the latest security patches provided by Texas Instruments to address the vulnerability.
Monitor and restrict Bluetooth connections to trusted devices only.

Long-Term Security Practices

Regularly update firmware and software to ensure the latest security measures are in place.
Conduct security assessments and penetration testing to identify and address potential vulnerabilities.

Patching and Updates

Apply patches and updates released by Texas Instruments to mitigate the vulnerability and enhance system security.