CVE-2025-32880 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 do…
Critical CVSS: 9.8

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks.
Vendor
Yftech
Product
Coros Pace 3 Firmware
CWE
CWE-319
Yayın Tarihi
2025-06-20 14:15:28
Güncelleme
2025-07-08 14:32:32
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-319 Coros Pace 3 Firmware CRITICAL Yftech 2025

Referanslar

https://support.coros.com/hc/en-us/articles/20087694119828-COROS-PACE-3-Release-Notes https://syss.de https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-029.txt https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-029.txt