PT-2025-50323 · Bluetooth · Bluetooth

Mattar Bernhard · Published 2025-12-10 · Updated 2025-12-10 · CVE-2024-2104

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Affected versions not specified

Description Improper Bluetooth Low Energy (BLE) security configurations on the device's Generic Attribute Profile (GATT) server allow an adjacent, unauthenticated attacker to read and write device control commands through a mobile app service. This could potentially render the device unusable. The GATT server manages the communication between the device and other Bluetooth-enabled devices, and improper configurations can expose sensitive functionalities to unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-2104

Affected Products

Bluetooth

References · 7

• https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2025/hbsa-2025-0001.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2104 · Security Note
• https://certvde.com/en/advisories/VDE-2024-076 · Vendor Advisory
• https://twitter.com/CVEnew/status/1998781312153399538 · Twitter Post
• https://t.me/cveNotify/145318 · Telegram Post
• https://twitter.com/CveFindCom/status/1998749339754041693 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1998756292546957430 · Twitter Post