CVE-2025-3496 - Vulnerability Details - OpenCVE

An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://cert.vde.com/en/advisories/VDE-2025-026

History

Mon, 12 May 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 12 May 2025 08:15:00 +0000

Type	Values Removed	Values Added
Description		An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface.
Title		AUMA Riester: Buffer overflow in service telegram
Weaknesses		CWE-120
References		https://cert.vde.com/en/advisories/VDE-2025-026
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2025-05-12T08:01:57.671Z

Updated: 2025-05-16T09:00:16.307Z

Reserved: 2025-04-10T08:26:28.797Z

Link: CVE-2025-3496

Vulnrichment

Updated: 2025-05-12T14:30:19.577Z

NVD

Status : Awaiting Analysis

Published: 2025-05-12T08:15:19.537

Modified: 2025-05-12T17:32:32.760

Link: CVE-2025-3496

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-3496", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-04-10T08:26:28.797Z", "datePublished": "2025-05-12T08:01:57.671Z", "dateUpdated": "2025-05-16T09:00:16.307Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "AC1.2", "vendor": "Auma Riester", "versions": [{"lessThan": "06.09.04", "status": "affected", "version": "06.00.00", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "MEC 03.01", "vendor": "Auma Riester", "versions": [{"lessThan": "01.02.00", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PROFOX", "vendor": "Auma Riester", "versions": [{"lessThan": "01-01.10.00", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "SGx/SVx", "vendor": "Auma Riester", "versions": [{"lessThan": "03.05.01", "status": "affected", "version": "03.00.00", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "TIGRON", "vendor": "Auma Riester", "versions": [{"lessThan": "01-01.09.00", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "TIGRON SIL", "vendor": "Auma Riester", "versions": [{"lessThan": "02-01.01.00", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Dennis Schaefer from ONEKEY GmbH"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface."}], "value": "An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-05-16T09:00:16.307Z"}, "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2025-026"}], "source": {"advisory": "VDE-2025-026", "defect": ["CERT@VDE#641760"], "discovery": "UNKNOWN"}, "title": "AUMA Riester: Buffer overflow in service telegram", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-12T14:30:11.496582Z", "id": "CVE-2025-3496", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-12T14:32:49.221Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-3496", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-12T14:30:11.496582Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-12T14:30:19.577Z"}}], "cna": {"title": "AUMA Riester: Buffer overflow in service telegram", "source": {"defect": ["CERT@VDE#641760"], "advisory": "VDE-2025-026", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Dennis Schaefer from ONEKEY GmbH"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Auma Riester", "product": "AC1.2", "versions": [{"status": "affected", "version": "06.00.00", "lessThan": "06.09.04", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Auma Riester", "product": "MEC 03.01", "versions": [{"status": "affected", "version": "0", "lessThan": "01.02.00", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Auma Riester", "product": "PROFOX", "versions": [{"status": "affected", "version": "0", "lessThan": "01-01.10.00", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Auma Riester", "product": "SGx/SVx", "versions": [{"status": "affected", "version": "03.00.00", "lessThan": "03.05.01", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Auma Riester", "product": "TIGRON", "versions": [{"status": "affected", "version": "0", "lessThan": "01-01.09.00", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Auma Riester", "product": "TIGRON SIL", "versions": [{"status": "affected", "version": "0", "lessThan": "02-01.01.00", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2025-026"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface.", "supportingMedia": [{"type": "text/html", "value": "An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-05-16T09:00:16.307Z"}}}, "cveMetadata": {"cveId": "CVE-2025-3496", "state": "PUBLISHED", "dateUpdated": "2025-05-16T09:00:16.307Z", "dateReserved": "2025-04-10T08:26:28.797Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2025-05-12T08:01:57.671Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.1"}