PT-2025-40409 · Unknown · Agasta Easytouch+

Yashodhanvivek · Published 2025-10-02 · Updated 2025-10-02 · CVE-2025-56019

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Agasta Easytouch+ version 9.3.97

Description The device has an insecure permission issue that allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Establishing an unauthorized connection prevents legitimate applications from connecting, resulting in a denial of service. The attack requires proximity to the device and is exploitable from an adjacent network location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-277

Related Identifiers

CVE-2025-56019

Affected Products

Agasta Easytouch+

References · 5

• 🔥 https://github.com/Yashodhanvivek/Agatsa-EasyTouch-Plus---CVE-2025-56019/blob/main/input.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56019 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56019 · Vendor Advisory
• https://t.me/CVEtracker/33968 · Telegram Post
• https://twitter.com/CVEnew/status/1973804831442624740 · Twitter Post