CVE-2025-56019

6.5MEDIUM

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication.

公開日: 10/2/2025更新日: 10/27/2025
NVDで表示MITREで表示

説明

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect, causing a denial of service. The attack requires proximity to the device, making it exploitable from an adjacent network location.

AI分析AIによる分析

影響を受ける製品

agastaeasy_touch_plus_firmware
9.3.97
agastaeasy_touch_plus
-

参照