NA

CVE-2024-21306

Published: 09/01/2024 Updated: 12/01/2024
CVSS v3 Base Score: 5.7 | Impact Score: 3.6 | Exploitability Score: 2.1
VMScore: 0

Vulnerability Summary

Microsoft Bluetooth Driver Spoofing Vulnerability

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows server 2022

microsoft windows server 2022 23h2

microsoft windows 11 23h2

microsoft windows 11 21h2

microsoft windows 10 21h2

microsoft windows 11 22h2

microsoft windows 10 22h2

Github Repositories

Hi, My Name is Keyboard This repository contains proof-of-concept scripts for CVE-2023-45866, CVE-2024-21306, and CVE-2024-0230 Additional details can be found in the blog post Proof of Concept Description Android Keystroke Injection Force-pairs a virtual Bluetooth keyboard with a vulnerable Android device and injects 10 seconds of tab keypresses Linux Keystroke Inj

install dependencies from apt sudo apt install -y bluez-tools bluez-hcidump libbluetooth-dev git gcc python3-pip python3-setuptools python3-pydbus install pybluez from source git clone githubcom/pybluez/pybluezgit cd pybluez sudo python3 setuppy install build bdaddr from the bluez source cd ~/ git clone --depth=1 githubcom/bluez/bluezgit gcc -o bdaddr ~/b

Hi, My Name is Keyboard This repository contains proof-of-concept scripts for CVE-2023-45866, CVE-2024-21306, and CVE-2024-0230 Additional details can be found in the blog post Proof of Concept Description Android Keystroke Injection Force-pairs a virtual Bluetooth keyboard with a vulnerable Android device and injects 10 seconds of tab keypresses Linux Keystroke Inj