CVE:CVE-2020-15509
CNNVD:CNNVD-202007-312
Nordic Semiconductor Android BLE Library和Nordic Semiconductor Android DFU Library都是挪威Nordic Semiconductor公司的产品。Nordic Semiconductor Android BLE Library是一款蓝牙低功耗（BLE）库。Nordic Semiconductor Android DFU Library是一款DFU（设备固件更新）功能库。
Nordic Semiconductor Android BLE Library 2.2.1及之前版本和DFU Library 1.10.4及之前版本（由nRF Connect和其他应用程序使用）存在安全漏洞，该漏洞源于设备进行了未加密的通信（用户认为该通信已加密）。攻击者可利用该漏洞获取敏感信息。
solution:Upgrade nordicsemi android_ble_library to a higher version than 2.2.1,and avoid the version (,2.2.1]; Upgrade nordicsemi dfu_library to a higher version than 1.10.4,and avoid the version (,1.10.4]