Coros Pace 3 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:yftech:coros_pace_3_firmware:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Yftech (7268124d-0fe0-5995-9abf-fd688bf1e0e7) |
|---|---|
| Product | Coros Pace 3 Firmware (03e3ff6b-185e-52df-a8ea-59cbdb6a5a03) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48706 |
vulnerable | 2026-06-08 07:27:16.328165 |
Details available
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot.
Published: 2025-06-20T00:00:00.000Z
Updated: 2025-06-23T15:44:40.058Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48705 |
vulnerable | 2026-06-08 07:27:16.327046 |
Details available
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot.
Published: 2025-06-20T00:00:00.000Z
Updated: 2025-06-23T14:08:18.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32880 |
vulnerable | 2026-06-08 07:19:00.931263 |
Details available
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks.
Published: 2025-06-20T00:00:00.000Z
Updated: 2025-06-24T15:27:48.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32879 |
vulnerable | 2026-06-08 07:19:00.930857 |
Details available
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It starts advertising if no device is connected via Bluetooth. This allows an attacker to connect with the device via BLE if no other device is connected. While connected, none of the BLE services and characteristics of the device require any authentication or security level. Therefore, any characteristic, depending on their mode of operation (read/write/notify), can be used by the connected attacker. This allows, for example, configuring the device, sending notifications, resetting the device to factory settings, or installing software.
Published: 2025-06-20T00:00:00.000Z
Updated: 2025-06-24T13:47:58.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32878 |
vulnerable | 2026-06-08 07:19:00.930467 |
Details available
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for downloading firmware files. Before downloading firmware files, the watch requests some information about the firmware via HTTPS from the back-end API. However, the X.509 server certificate within the TLS handshake is not validated by the device. This allows an attacker within an active machine-in-the-middle position, using a TLS proxy and a self-signed certificate, to eavesdrop and manipulate the HTTPS communication. This could be abused, for example, for stealing the API access token of the assigned user account.
Published: 2025-06-20T00:00:00.000Z
Updated: 2025-06-20T14:49:41.270Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32877 |
vulnerable | 2026-06-08 07:19:00.929935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32876 |
vulnerable | 2026-06-08 07:19:00.928683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.