CVE-2025-3496 AUMA Riester: Buffer overflow in service telegram

An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface...

CVE-2025-3496 AUMA Riester: Buffer overflow in service telegram

An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface...

CVE-2025-3496

CVE-2025-3496 describes an unauthenticated remote buffer overflow affecting AUMA devices (AC1.2, MEC, PROFOX, SGx/SVx, TIGRON, TIGRON SIL) that can trigger unexpected behavior or DoS via Bluetooth or RS-232. Root cause is a buffer copy without proper size checking (classic buffer overflow). Publi...