CVE-2025-48705 - An issue was discovered in COROS PACE 3 through 3.0808.0

Back Back to CVE browser

HIGH

An issue was discovered in COROS PACE 3 through 3.0808.0

Published Jun 20, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.51%

Description

An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18747
Advisory
https://syss.de
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-027.txt
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18747		Advisory
https://syss.de		Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-027.txt		ExploitThird Party Advisory