PoC Index

CVE-2025-44557

HIGH 8.1EPSS 0.3%

A state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairing_failed packet.

CVSS v3.1
8.1 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.26% chance of exploitation in the next 30 days, 17th percentile
Published
2025-06-27
Updated
2025-07-02

Proof-of-concept exploits (1)

References

Related