WICED Studio 6.4.0 Key Negotiation Of Bluetooth (KNOB) Vulnerability

[HiNa_2357246]

Hi,

Our customer is working on software development with WICED 6.4.0 and will have BT SIG certification at the end of this March.

While preparing for BT SIG certification, the certification body noted the following.

>Reminder: Erratum 11838 testing is now mandatory for qualification.

>* Erratum 11838 was first qualifiable in TCRL 2019-1 and the qualification requirements became active on 20-Feb-2020.

Does WICED 6.4.0 include a fix of knob?

We were working on WICED host stack QDID 115853, but it's looks it not include a knob fix.

Regards,

Nagao.

[HiNa_2357246]

Hi,

My customer is using 43438 + STM Environment. They need solution for the environment.

And almost development has been completed on customer's side. My customer prefers minimum change ( e.g. sending a VSC ) to comply erratum 11838 for my customer.

Regards,

Nagao.

[AnjanaM_61 · Accepted solution]

Hello Nagao San,

WICED 6.4.0 public SDK release version doesn't have KNOB fix.

Please contact your local Cypress FAE for the fix release.

Regards,
Anjana