CVE-2025-69969 - Vulnerability Analysis

Overview

SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 contains a broken authentication and authorization caused by lack of mechanisms in BLE communication protocol, letting attackers execute arbitrary commands, intercept data, and hijack firmware over BLE proximity without connection.

Severity & Score

Impact

Attackers can execute arbitrary commands, intercept cleartext data, and hijack firmware remotely via BLE, leading to full device compromise.

Mitigation

Update to the latest version with proper authentication and authorization mechanisms in BLE communication.

References

• https://github.com/mukundbhuva/BLEached-Security
• https://github.com/mukundbhuva/BLEached-Security/security/advisories/GHSA-cp6q-87g8-mq77

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 4, 2026

🔴 CVE-2025-69969 - Critical (9.6) A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on t... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69969/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner