Matching HBImSG

I.Auth.HBImSG.6

Spoofing a device RemoteHost in a Bluetooth pair with device Host in Space: an attacker with access to a location where Host is paired with RemoteHost can spoof the latter to the former. This threat captures the case where SSP is used with a one-sided user confirmation. In principle this can still be spoofed, but it would have to be done where the pair is established, which can be the most secure location they are used (not necessarily in Space where the attacker is present).