CVE-2025-41657

AUMA: Incorrect delivery status of the Bluetooth configuration

State: Published
Severity: 4.3 Medium
Published: Jun 10, 2025
Updated: Jun 10, 2025
Reserved: Apr 16, 2025

Description

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	CERTVDE

Weaknesses

CWE-207 Observable Behavioral Discrepancy With Equivalent Products

Affected Products

Product	Versions
AC1.2Auma	01.01.2024 to before 09.05.2025Affected
PROFOXAuma	01.01.2024 to before 09.05.2025Affected

References

https://certvde.com/en/advisories/VDE-2025-047

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.