CVE-2025-69969 - Vulnerability Analysis

Overview

SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 contains a broken authentication and authorization caused by lack of mechanisms in BLE communication protocol, letting attackers execute arbitrary commands, intercept data, and hijack firmware over BLE proximity without connection.

Severity & Score

Impact

Attackers can execute arbitrary commands, intercept cleartext data, and hijack firmware remotely via BLE, leading to full device compromise.

Mitigation

Update to the latest version with proper authentication and authorization mechanisms in BLE communication.

References

• https://github.com/mukundbhuva/BLEached-Security
• https://github.com/mukundbhuva/BLEached-Security/security/advisories/GHSA-cp6q-87g8-mq77

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner