Attacker Value
Low
(1 user assessed)
Exploitability
High
(1 user assessed)
User Interaction
Required
Privileges Required
None
Attack Vector
Adjacent_network
2

CVE-2024-21306

Disclosure Date: January 09, 2024 •
CVE-2024-21306 CVSS v3 Base Score: 5.7
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Microsoft Bluetooth Driver Spoofing Vulnerability

Add Assessment

1
Ratings
  • Attacker Value
    Low
  • Exploitability
    High
Common in enterpriseVulnerable in default configuration
Technical Analysis

CVE-2024-21306 is part of a series of vulnerabilities affecting the Bluetooth stacks in multiple operating systems, allowing attackers to pair a virtual Bluetooth keyboard without authentication or user confirmation.

This vulnerability impacts Windows systems when a Bluetooth keyboard has been paired with the computer and is either powered off or out of range. In this case, the Windows system can be exploited if the user interacts with a malicious pairing request in any way (clicking accept, reject, or close). This vulnerability has been fixed in the January 2024 Patch Tuesday updates for Windows 10, 11, and Server 2022.

This is part of a broader issue with Bluetooth vulnerabilities across various platforms, including Android, Linux, macOS, and iOS, each having its own conditions and methods of exploitation. The vulnerabilities generally allow for keystroke injection, posing significant security risks.

Log in to Add Reply
CVSS V3 Severity and Metrics
Base Score:
5.7 Medium
Impact Score:
3.6
Exploitability Score:
2.1
Vector:
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector (AV):
Adjacent_network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
High
Availability (A):
None

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Windows Server 2022 10.0.20348.2227
Windows 11 version 21H2 10.0.22000.2713
Windows 10 Version 21H2 10.0.19044.3930
Windows 11 version 22H2 10.0.22621.3007
Windows 10 Version 22H2 10.0.19045.3930
Windows 11 version 22H3 10.0.22631.3007
Windows 11 Version 23H2 10.0.22631.3007
Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.643
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • microsoft

Products

  • windows 10 21h2,
  • windows 10 22h2,
  • windows 11 21h2,
  • windows 11 22h2,
  • windows 11 23h2,
  • windows server 2022,
  • windows server 2022 23h2

References

Canonical
CVE-2024-21306 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21306)
Exploit
The following exploit POCs have not been verified by Rapid7 researchers, but are sourced from: nomi-sec/PoC-in-GitHub.
Additional sources will be added here as they become relevant.
Notes: We will only add the top 3 POCs for a given CVE. POCs added here must have at least 2 GitHub stars.
PoC (https://github.com/marcnewlin/hi_my_name_is_keyboard?tab=readme-ov-file)
Miscellaneous
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21306

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis