CVE-2025-41657

Published: Jun 10, 2025Modified: Jun 17, 2026Deferred

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: info@cert.vde.com (Secondary)

Description

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

Related CWEs

CWE-207

Observable Behavioral Discrepancy With Equivalent Products

The product operates in an environment in which its existence or specific identity should not be known, but it behaves differently than other products with equivalent functionality, in a way that is observable to an attacker.

References (1)

https://certvde.com/en/advisories/VDE-2025-047

Source: info@cert.vde.com

Timeline

No history available yet.