Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-12856

Description

OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used.

POC

Reference

- https://github.com/alwentiu/COVIDSafe-CVE-2020-12856/blob/master/README.md

Github

- https://github.com/0xT11/CVE-POC

- https://github.com/ARPSyndicate/cvemon

- https://github.com/Mygod/pogoplusle

- https://github.com/TinyNiko/android_bulletin_notes

- https://github.com/alwentiu/COVIDSafe-CVE-2020-12856

- https://github.com/alwentiu/CVE-2020-14292

- https://github.com/alwentiu/contact-tracing-research

- https://github.com/developer3000S/PoC-in-GitHub

- https://github.com/hectorgie/PoC-in-GitHub

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/parthdmaniar/coronavirus-covid-19-SARS-CoV-2-IoCs

- https://github.com/soosmile/POC