PT-2025-37755 · Positron · Positron Px360Bt

Wagneralves_87750 · Published 2025-09-15 · Updated 2025-12-23 · CVE-2025-56448

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Positron PX360BT SW REV 8

Description The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes, allowing repeated reuse of captured transmissions. This exposes users to significant security risks, including vehicle theft and loss of trust in the alarm's anti-cloning claims.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2025-56448

Affected Products

Positron Px360Bt

References · 8

• 🔥 https://medium.com/@wagneralves_87750/cve-2025-56448-replay-attack-vulnerability-in-positron-px360bt-car-alarm-system-c9f1ccea6ebe · Exploit
• https://osv.dev/vulnerability/CVE-2025-56448 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56448 · Security Note
• https://twitter.com/CVEnew/status/2003567355650040106 · Twitter Post
• https://t.me/cveNotify/138664 · Telegram Post
• https://t.me/CVEtracker/32547 · Telegram Post
• https://t.me/cveNotify/135546 · Telegram Post
• https://positron.com.br/blog/positron-lanca-alarme-px360bt-starter · Note