CVE-2025-62235highCWE-290

CVE-2025-62235: falha de alta gravidade em Apache Mynewt NimBLE

Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Mynewt NimBLE

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 0.4%
Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade to version 1.9.0, which fixes the issue.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Apache Software Foundation · Apache Mynewt NimBLE
CVEs relacionadas — Apache Mynewt NimBLE

No mesmo produto, das mais perigosas para as menos.

CVE-2025-53477HIGHApache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layerEPSS 0.8%CVE-2025-53470LOWApache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driverEPSS 0.3%CVE-2025-52435HIGHApache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controllerEPSS 0.2%