Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Attack Patterns CAPEC-668 — Key Negotiation of Bluetooth Attack (KNOB)
CAPEC-668

Key Negotiation of Bluetooth Attack (KNOB)

TLP:CLEAR

Description

Typical severity: High. Likelihood of attack: Low. An adversary can exploit a flaw in Bluetooth key negotiation allowing them to decrypt information sent between two devices communicating via Bluetooth. The adversary uses an Adversary in the Middle setup to modify packets sent between the two devices during the authentication process, specifically the entropy bits. Knowledge of the number of entropy bits will allow the attacker to easily decrypt information passing over the line of communication.

Mitigation

Newer Bluetooth firmwares ensure that the KNOB is not negotaited in plaintext. Update your device.

Details

Platforms
Software
Added
Jul 14, 2026
Leaving Threaticon

This link opens an external site that isn't part of the platform.