CVE-2025-20649

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/March-2025	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:mediatek:software_development_kit::::::::
	cpe:2.3:o:openwrt:openwrt:23.05:::::::*

OR	cpe:2.3:h:mediatek:mt6880:-:::::::*
	cpe:2.3:h:mediatek:mt6890:-:::::::*
	cpe:2.3:h:mediatek:mt6980:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt7663:-:::::::*
	cpe:2.3:h:mediatek:mt7902:-:::::::*
	cpe:2.3:h:mediatek:mt7925:-:::::::*
	cpe:2.3:h:mediatek:mt7927:-:::::::*
	cpe:2.3:h:mediatek:mt7961:-:::::::*

History

22 Apr 2025, 13:46

Type	Values Removed	Values Added
First Time		Mediatek Mediatek software Development Kit Mediatek mt7927 Openwrt Mediatek mt6980 Mediatek mt6890 Mediatek mt7663 Openwrt openwrt Mediatek mt7902 Mediatek mt6990 Mediatek mt6880 Mediatek mt7925 Mediatek mt7961
References	~~() https://corp.mediatek.com/product-security-bulletin/March-2025 -~~	() https://corp.mediatek.com/product-security-bulletin/March-2025 - Vendor Advisory
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:a:mediatek:software_development_kit:::::::: cpe:2.3:o:openwrt:openwrt:23.05:::::::* cpe:2.3:h:mediatek:mt6890:-:::::::* cpe:2.3:h:mediatek:mt7925:-:::::::* cpe:2.3:h:mediatek:mt6880:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt7927:-:::::::* cpe:2.3:h:mediatek:mt7961:-:::::::* cpe:2.3:h:mediatek:mt7902:-:::::::* cpe:2.3:h:mediatek:mt6980:-:::::::* cpe:2.3:h:mediatek:mt7663:-:::::::*

04 Mar 2025, 17:15

Type	Values Removed	Values Added
Summary		(es) En Bluetooth Stack SW, existe una posible divulgación de información debido a la falta de una verificación de permisos. Esto podría provocar la divulgación de información remota (proximal/adyacente) sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID de parche: WCNCR00396437; ID de problema: MSV-2184.
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5

03 Mar 2025, 03:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-03 03:15

Updated : 2025-04-22 13:46

NVD link : CVE-2025-20649

Mitre link : CVE-2025-20649

CVE.ORG link : CVE-2025-20649

JSON object : View

Products Affected

mediatek

mt7925
mt7663
mt6980
mt6990
software_development_kit
mt7927
mt6890
mt6880
mt7902
mt7961

openwrt

openwrt

CWE

CWE-280

Improper Handling of Insufficient Permissions or Privileges

NVD-CWE-noinfo

{"id": "CVE-2025-20649", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-03-03T03:15:09.730", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/March-2025", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@mediatek.com", "description": [{"lang": "en", "value": "CWE-280"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184."}, {"lang": "es", "value": "En Bluetooth Stack SW, existe una posible divulgaci\u00f3n de informaci\u00f3n debido a la falta de una verificaci\u00f3n de permisos. Esto podr\u00eda provocar la divulgaci\u00f3n de informaci\u00f3n remota (proximal/adyacente) sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: WCNCR00396437; ID de problema: MSV-2184."}], "lastModified": "2025-04-22T13:46:37.947", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DB45975-C773-4AF2-BAB7-FC4D04B2580B", "versionEndIncluding": "3.6"}, {"criteria": "cpe:2.3:o:openwrt:openwrt:23.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AED95D06-8EC6-4070-BE3C-E0F851D7FFC1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68CF4A7A-3136-4C4C-A795-81323896BE11"}, {"criteria": "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "171D1C08-F055-44C0-913C-AA2B73AF5B72"}, {"criteria": "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"}, {"criteria": "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"}, {"criteria": "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "10C79211-F064-499D-914E-0BACD038FBF4"}, {"criteria": "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "91DEA745-47A8-43F1-A1B2-F53F651A99EF"}, {"criteria": "cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "27CFC9DF-2F4C-469A-8A19-A260B1134CFE"}, {"criteria": "cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "05525018-AFE0-415C-A71C-A77922C7D637"}, {"criteria": "cpe:2.3:h:mediatek:mt7961:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7797750A-0B32-43B7-A40C-E4591894D484"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}

6.5 /10