Apache NimBLE Authentication Bypass Vulnerability Allowing Impersonation

An authentication bypass vulnerability has been identified in Apache NimBLE versions through 1.8.0. This vulnerability allows an attacker to spoof a security request, leading to the removal of an original bond and the establishment of a new bond with an impostor. As a result, the attacker could impersonate a legitimate device.

Impact

Exploitation of this vulnerability could allow an attacker to impersonate a legitimate device by spoofing security requests, potentially leading to unauthorized access or actions within the application or system.

Remediation

Users are advised to upgrade to Apache NimBLE version 1.9.0, which addresses this vulnerability.