CVE-2025-41657

AUMA: Incorrect delivery status of the Bluetooth configuration PUBLISHED

Description (CNA)

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

Affected (CNA)

Vendor / product	Versions
Auma / AC1.2	affected 01.01.2024 before 09.05.2025
Auma / PROFOX	affected 01.01.2024 before 09.05.2025

CWE

CWE-207

References

https://certvde.com/en/advisories/VDE-2025-047

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.