PT-2025-24649 · Auma · Ac1.2+1

Published 2025-06-10 · Updated 2025-06-10 · CVE-2025-41657

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description An undocumented active Bluetooth stack in certain products allows fingerprinting by an unauthenticated adjacent attacker. This issue affects products delivered between 01.01.2024 and 09.05.2025.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-207

Related Identifiers

CVE-2025-41657

Affected Products

Ac1.2

Profox

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-41657 · Security Note
• https://t.me/cvenotify/125233 · Telegram Post
• https://t.me/cvetracker/25901 · Telegram Post
• https://twitter.com/CVEnew/status/1932396135806800163 · Twitter Post
• https://certvde.com/en/advisories/VDE-2025-047 · Note