CVE-2025-56019
6.5MEDIUMAn insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication.
게시됨: 10/2/2025업데이트됨: 10/27/2025
설명
An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect, causing a denial of service. The attack requires proximity to the device, making it exploitable from an adjacent network location.
AI 분석AI 기반
영향받는 제품
agastaeasy_touch_plus_firmware
9.3.97
agastaeasy_touch_plus
-
참조
- https://github.com/Yashodhanvivek/Agatsa-EasyTouch-Plus---CVE-2025-56019/blob/main/input.mdExploitThird Party Advisory