CVE-2025-41657 AUMA: Incorrect delivery status of the Bluetooth configuration

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker...

CVE-2025-41657 AUMA: Incorrect delivery status of the Bluetooth configuration

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker...

CVE-2025-41657

CVE-2025-41657 concerns an undocumented active Bluetooth stack that enables fingerprinting by an unauthenticated adjacent attacker. Connected sources tie this to AUMA PROFOX and AUMA AC1.2 (and related products) with affected delivery window 01-01-2024 to 09-05-2025. The underlying issue is the p...