Our advisories highlight current cyber security threats and vulnerabilities in New Zealand, and provide guidance on how to mitigate their impact.
Eight Bluetooth vulnerabilities have been identified and collectively called BlueBorne. These vulnerabilities are currently known to affect Windows, Linux, Android, Apple iOS and other smart devices.
Systems known to be affected are:
For more detailed information, see the Armis page in the More Information section below.
The vulnerabilities are:
The Blueborne vulnerabilities could allow a remote (but physically close) unauthenticated attacker to access a vulnerable device, without any authentication or user interaction. If you have a vulnerable device, with Bluetooth enabled, an attacker who is within range of your Bluetooth device may be able to gain access to your device and run malicious code, without your intervention or knowledge
If your device is running an operating system that is known to be affected and is not fully up to date (or has not had an update for this issue released), and you have Bluetooth enabled, you are at risk.
In order to protect yourself from this vulnerability, these are the steps that CERT NZ recommends you take immediately to protect your devices.
Additional information for businesses:
If you require more information or further support, submit a report on our website or contact us on 0800 CERT NZ.
