BlueBorne.

A 2017 set of Bluetooth vulnerabilities discovered by Armis that allowed remote code execution and man-in-the-middle attacks on Android, iOS, Linux, and Windows. It belongs to the Attacks & Threats category of cybersecurity.

A 2017 set of Bluetooth vulnerabilities discovered by Armis that allowed remote code execution and man-in-the-middle attacks on Android, iOS, Linux, and Windows.

BlueBorne is a family of eight Bluetooth vulnerabilities disclosed by security firm Armis in September 2017. The flaws affected Bluetooth implementations on Android, iOS, Linux, and Windows, and could be exploited without pairing or user interaction as long as Bluetooth was enabled. The most severe issues included CVE-2017-0781 and CVE-2017-0782 in Android, CVE-2017-1000251 in the Linux BlueZ kernel stack, and CVE-2017-8628 in Windows. Armis estimated more than 5.3 billion devices were initially exposed. Patches from Google, Microsoft, Linux distributions, and Apple followed in 2017, but countless unpatched IoT and embedded devices remained vulnerable for years, making BlueBorne a milestone in proximity-based wireless attack research.

Defences for BlueBorne typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: BlueBorne attack vector.