PT-2025-50938 · Cleverdisplay · Cleverdisplay Blueone

Dennis Kussendrager + 1 · Published 2025-12-12 · Updated 2025-12-12 · CVE-2025-36755

Positive Technologies (AI Summary)

CVSS v4.0

2.4

Low

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions CleverDisplay BlueOne (affected versions not specified)

Description The CleverDisplay BlueOne hardware player allows access to the BIOS setup interface by connecting a USB keyboard and pressing ESC during boot after bypassing the device’s physical enclosure. This exposes internal system information, potentially increasing the attack surface. The device is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions. The issue does not allow integrity or availability compromise under standard or tested configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unsafe Debug Access Level

Weakness Enumeration

CWE-1191

CWE-1244

Related Identifiers

CVE-2025-36755

Affected Products

Cleverdisplay Blueone

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36755 · Security Note
• https://csirt.divd.nl/CVE-2025-5743 · Note
• https://csirt.divd.nl/DIVD-2025-00043 · Note
• https://t.me/CVEtracker/39625 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999562649491702041 · Twitter Post