PT-2025-29957 · Google+1 · Android+1

Bai Xingyu + 2 · Published 2025-07-08 · Updated 2025-07-18 · CVE-2025-2818

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Motorola Smart Connect Android Application version 1.0

Description A vulnerability exists in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application. This could allow a nearby attacker within Bluetooth interaction range to intercept files when transferred to a device not paired in Smart Connect.

Recommendations Update Motorola Smart Connect Android Application to a version with a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-287

CWE-319

Related Identifiers

BDU:2025-13182

CVE-2025-2818

Affected Products

Android

Motorola Smart Connect

References · 6

• https://bdu.fstec.ru/vul/2025-13182 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2818 · Security Note
• https://twitter.com/CVEnew/status/1945932464490438660 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1946011794385854922 · Twitter Post
• https://en-us.support.motorola.com/app/answers/detail/a_id/186727 · Note
• https://support.lenovo.com/us/en/product_security/LEN-188742 · Note