Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yftech'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-32876 6.8 An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does not support LE Secure Connections and instead enforces BLE Legacy Pairing. In BLE Legacy Pairing, the Short-Term Key (STK) can be ea 2025-07-08 14:32:59
CVE-2025-32877 9.8 An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, whi 2025-07-08 14:32:52
CVE-2025-32878 9.8 An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for downloading firmware files. Before downloading firmware files, the watch requests some information 2025-07-08 14:32:47
CVE-2025-32879 8.8 An issue was discovered on COROS PACE 3 devices through 3.0808.0. It starts advertising if no device is connected via Bluetooth. This allows an attacker to connect with the device via BLE if no other device is connected. While connected, none of the 2025-07-08 14:32:41
CVE-2025-32880 9.8 An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sn 2025-07-08 14:32:32
CVE-2025-48705 7.5 An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot. 2025-07-08 14:32:25
CVE-2025-48706 9.1 An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot. 2025-07-08 14:32:12
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1
Zapisa po stranici: