What’s Vulnerable › Vulnerabilities
CVE-2025-41657: AUMA: Incorrect delivery status of the Bluetooth configuration
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-10 · updated 2026-06-17
- Weakness: CWE-207
Description
Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.
Affected products
- Auma AC1.2: from 01.01.2024 before 09.05.2025 — fixed in 09.05.2025
- Auma PROFOX: from 01.01.2024 before 09.05.2025 — fixed in 09.05.2025
How to fix
Upgrade to a fixed version: Auma AC1.2 09.05.2025; Auma PROFOX 09.05.2025. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-41657 or the next vulnerability affects your stack