CVE-2006-6899: bluez_project bluez Configuration
Vulnerability summary
CVE-2006-6899 is a medium (CVSS 5.4) Configuration vulnerability in bluez_project bluez. EPSS estimates a 3.41% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities. 1 public exploit is recorded.
Weaponized exploit (exploit-database, 16-11-2007)
Source freshness unavailable
How is this decided?Timeline
- 08-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.41%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
Increase +0.09 pp
From 3.32% on 05-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundBlueZ 1.x/2.x - HIDD Bluetooh HID Command Injection
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat3 products
- bluez-utils< 0:2.10-2.2
- bluez-utils-cups< 0:2.10-2.2
- bluez-utils-debuginfo< 0:2.10-2.2
Bluez_project1 product
- bluez≤ 2.24
2 vendors · 4 products
References
22 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10208VDB EntrySignatureX Refsource OVAL
- mulliner.org/bluetooth/hidattack.phpX Refsource MISC
