Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-41657 EUVD-2025-17662GHSA-w6h2-p5q3-p762

AUMA: Incorrect delivery status of the Bluetooth configuration

Published Jun 10, 2025 · Updated Jun 10, 2025 · Assigned by CERTVDE

Description

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

Affected products

VendorProductAffectedFixed
Auma AC1.2 01.01.2024 – < 09.05.2025 09.05.2025
Auma PROFOX 01.01.2024 – < 09.05.2025 09.05.2025

Advisories 1

References