CVE-2024-54982: Undefined Security Weakness

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

Quectel BC25 security vulnerabilities

The Quectel BC25 is a high-performance, low-power NB-IoT wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BC25 BC25PAR01A06 version, which originated from a vulnerability that allows an attacker to bypass authentication via a...

PT-2024-36457 · Quectel · Quectel Bc25

Name of the Vulnerable Software and Affected Versions: Quectel BC25 version BC25PAR01A06 Description: The issue allows attackers to bypass authentication via a crafted NAS message. It is noted that Quectel disputes this because the issue is in the chipset supply chain and is not localized to one ...