CVE-2025-32875

An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing attackers within Bluetooth range to eavesdrop on the communication. Furthermore, even if a user manually initiates pairing and bonding in the Android settings, the application continues to transmit data without requiring the watch to be bonded. This fallback behavior enables attackers to exploit the communication, for example, by conducting an active machine-in-the-middle attack.

• CWE-287
• CWE-311

• https://support.coros.com/hc/en-us/categories/4416357319956-Software-Updates
• https://syss.de
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-025.txt

Published

Jun 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3287A local code execution vulnerability exists in the Rockwell …7.8
• CVE-2025-32870A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-32871A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-32872A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-32873An issue was discovered in Django 4.2 before 4.2.21, 5.1 bef…5.3
• CVE-2025-32874An issue was discovered in Kaseya Rapid Fire Tools Network D…7.5
• CVE-2025-32876An issue was discovered on COROS PACE 3 devices through 3.08…6.8
• CVE-2025-32877An issue was discovered on COROS PACE 3 devices through 3.08…9.8
• CVE-2025-32878An issue was discovered on COROS PACE 3 devices through 3.08…9.8
• CVE-2025-32879An issue was discovered on COROS PACE 3 devices through 3.08…8.8
• CVE-2025-3288A local code execution vulnerability exists in the Rockwell …7.8
• CVE-2025-32880An issue was discovered on COROS PACE 3 devices through 3.08…9.8