SweynTooth Bluetooth® Low Energy (LE) Vulnerability
Microchip is aware of a Bluetooth LE security vulnerability named SweynTooth, originally published by the Singapore University of Technology and Design. The white paper detailing this vulnerability is available at the following link: https://asset-group.github.io/disclosures/sweyntooth/ Vulnerability Paper
Microchip takes security issues seriously and is currently working to understand the issue and provide solutions for our clients. We have determined that this vulnerability affects some of our Bluetooth LE products. This page will provide the latest insight and will be updated regularly.
Affected Products and Resolution
The table below lists Microchip products affected by SweynTooth and a proposed resolution. The affected Blueooth LE devices may become unresponsive and may require a reset from the host microcontroller when attacked.
CVE-2019-19194 (6.10) is one of the most serious of the published vulnerabilities. It enables an attacker in range of the radio transmission to bypass the “Secure Connections” pairing mode. No Microchip devices are affected by the CVE-2019-19194 (6.10).