CVE-2025-32879

creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18940...

CVE-2025-32879

CVE-2025-32879 affects COROS PACE 3 (up to v3.0808.0). The device advertises when no Bluetooth connection is present, allowing an unauthenticated BLE connection. Once connected, all BLE services/characteristics appear to require no authentication, enabling actions such as configuring the device, ...

CVE-2025-32879

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It starts advertising if no device is connected via Bluetooth. This allows an attacker to connect with the device via BLE if no other device is connected. While connected, none of the BLE services and characteristics of the device...