CVE-2025-20649
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 3, 2025
Updated: Mar 4, 2025
CWE ID 280
Summary
CVE-2025-20649 is a vulnerability affecting the Bluetooth Stack Software. It involves a missing permission check, resulting in potential information disclosure. This issue does not require user interaction or additional execution privileges for exploitation, making it a risk for remote (proximal or adjacent) attacks. The affected software has been patched with ID WCNCR00396437 and is assigned issue ID MSV-2184.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.