Aller au contenu
en Se connecter
Non notée

CVE-2025-52435 J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE

Description

J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange. This issue affects Apache NimBLE: through <= 1.8.0. Users are recommended to upgrade to version 1.9.0, which fixes the issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Mynewt NimBLE 1.8 premières → 1.8.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache Mynewt NimBLE

Les 4 CVE de Apache Mynewt NimBLE →
CVE-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver Non notée CVE-2025-53477 NULL Pointer Dereference vulnerability in Apache Nimble Non notée CVE-2025-62235 Authentication Bypass by Spoofing vulnerability in Apache NimBLE Non notée
Suivre cette CVE