Vulnerability stems from implementation flaws supporting pairing and encryption with both Bluetooth BR/EDR and LE in Bluetooth Specifications 4.2 through 5.0. Attack could let attackers overwrite or reduce the encryption key strength for pairing Bluetooth devices securely, allowing additional access to profiles or services that are not otherwise restricted. The attacking device needs to be within wireless range of a vulnerable Bluetooth device for an attack to succeed. The Bluetooth SIG suggested mitigation steps for potentially vulnerable devices, including: Mitigating the vulnerability.”]