Bluetooth-Sniffing Highway Traffic Monitors Vulnerable to MITM Attack

ICS-CERT alerts that Post Oak Traffic Systems' AWAM Bluetooth roadside readers generate authentication and host keys with insufficient entropy, allowing attackers to compute private keys, impersonate devices, and perform man-in-the-middle attacks to steal administrative credentials or control traffic monitoring systems; researchers found similar weak-key issues in many embedded devices, Post Oak has released a patch, and customers are advised to limit network exposure and use firewalls.