PT-2025-29083 · Opensynergy · Bluesdk

Published 2025-07-07 · Updated 2025-10-02 · CVE-2024-45433

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: OpenSynergy BlueSDK versions through 6.x

Description: The OpenSynergy BlueSDK Bluetooth stack contains an incorrect control flow scoping issue. The flaw is due to improper handling of exceptional conditions and a lack of proper return control flow after detecting an unusual condition. This can allow an attacker to bypass security validation and process incoming data. The vulnerability affects the Bluetooth protocols stack.

Recommendations: Versions prior to 7.0 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-703

CWE-705

Related Identifiers

BDU:2025-09386

CVE-2024-45433

Affected Products

Bluesdk

References · 13

• 🔥 https://pcacybersecurity.com/resources/advisory/perfekt-blue · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-45433 · Security Note
• https://bdu.fstec.ru/vul/2025-09386 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45433 · Vendor Advisory
• https://t.me/aptreports/20276 · Telegram Post
• https://twitter.com/CVEnew/status/1966536919388475532 · Twitter Post
• https://t.me/cveNotify/135323 · Telegram Post
• https://twitter.com/_0b1d1/status/1943657432628199436 · Twitter Post
• https://opensynergy.com · Note
• https://twitter.com/autumn_good_35/status/1943294204228317239 · Twitter Post
• https://t.me/true_secator/7214 · Telegram Post
• https://t.me/cveNotify/137247 · Telegram Post
• https://t.me/CVEtracker/32396 · Telegram Post