{
  "cveId": "CVE-2017-8628",
  "url": "https://patchblox.com/security/cve/CVE-2017-8628",
  "summary": "CVE-2017-8628 is fixed in 20 products on 1 platform, first by KB4025337, released July 11, 2017. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Microsoft Bluetooth Driver Spoofing Vulnerability",
  "description": "\u003Cp\u003EA spoofing vulnerability exists in Microsoft\u0027s implementation of the Bluetooth stack. An attacker who successfully exploited this vulnerability could perform a \u003Ca href=\u0022https://technet.microsoft.com/en-us/library/security/dn848375.aspx#MiTM\u0022\u003Eman-in-the-middle attack\u003C/a\u003E and force a user\u0027s computer to unknowingly route traffic through the attacker\u0027s computer. The attacker can then monitor and read the traffic before sending it on to the intended recipient.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, the attacker needs to be within the physical proximity of the targeted user, and the user\u0027s computer needs to have Bluetooth enabled. The attacker can then initiate a Bluetooth connection to the target computer without the user\u0027s knowledge.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how Windows handles Bluetooth requests.\u003C/p\u003E",
  "published": "2017-09-26T07:00:00Z",
  "severity": "Important",
  "cvss": 8.1,
  "epss": 0.02307,
  "epssPercentile": 0.83438,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8628",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1511 for 32-bit Systems",
      "fixedVersion": "10586.1106",
      "fix": "KB4038783",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038783",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1511 for x64-based Systems",
      "fixedVersion": "10586.1106",
      "fix": "KB4038783",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038783",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for 32-bit Systems",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for x64-based Systems",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1703 for 32-bit Systems",
      "fixedVersion": "15063.608",
      "fix": "KB4038788",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038788",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1703 for x64-based Systems",
      "fixedVersion": "15063.608",
      "fix": "KB4038788",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038788",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 for 32-bit Systems",
      "fixedVersion": "10240.17609",
      "fix": "KB4038781",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038781",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 for x64-based Systems",
      "fixedVersion": "10240.17609",
      "fix": "KB4038781",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038781",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4038777",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038777",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4025337",
      "url": "https://patchblox.com/security/fix/microsoft/kb4025337",
      "released": "2017-07-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4038777",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038777",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4025337",
      "url": "https://patchblox.com/security/fix/microsoft/kb4025337",
      "released": "2017-07-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for 32-bit systems",
      "fixedVersion": "",
      "fix": "KB4038792",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038792",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for 32-bit systems",
      "fixedVersion": "",
      "fix": "KB4025333",
      "url": "https://patchblox.com/security/fix/microsoft/kb4025333",
      "released": "2017-07-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB4038792",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038792",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB4025333",
      "url": "https://patchblox.com/security/fix/microsoft/kb4025333",
      "released": "2017-07-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows RT 8.1",
      "fixedVersion": "",
      "fix": "KB4038792",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038792",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4034786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4034786",
      "released": "2017-09-26T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4034786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4034786",
      "released": "2017-09-26T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for Itanium-Based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4034786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4034786",
      "released": "2017-09-26T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4034786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4034786",
      "released": "2017-09-26T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4034786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4034786",
      "released": "2017-09-26T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016 (Server Core installation)",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}