Which vulnerability allows an attacker to gain complete control over a device without a direct connection?

The vulnerability that allows an attacker to gain complete control over a device without a direct connection is BlueBorne. This attack exploits vulnerabilities in Bluetooth implementations, allowing attackers to take control of devices that are nearby and that have Bluetooth enabled, even if they do not have a pairing with the device. BlueBorne can enable attackers to access sensitive data, manipulate files, and execute malicious software on the compromised device, all while being within Bluetooth range.

The significance of BlueBorne lies in its ability to affect various operating systems, including Android, iOS, Windows, and Linux, making it a versatile and dangerous threat. Unlike other Bluetooth vulnerabilities, such as Bluesnarfing, which primarily focuses on unauthorized access to data, or Bluejacking, which is more about sending unsolicited messages, BlueBorne directly compromises device control and functionality. Thus, it represents a critical security concern regarding Bluetooth technology, highlighting the importance of keeping devices updated and adopting secure practices in device management.