Denial-of-Service Vulnerability in Harman Becker MGU21 Bluetooth Devices
CVE-2025-3885

5.3MEDIUM

Key Information:

Vendor

Harman Becker

Status
Mgu21
Vendor
CVE Published:
22 May 2025

What is CVE-2025-3885?

This vulnerability affects Harman Becker MGU21 Bluetooth devices, specifically within the Bluetooth stack of the BCM89359 chipset. The flaw arises from insufficient validation of Bluetooth frames, allowing network-adjacent attackers to exploit it without authentication. The exploitation of this flaw can lead to a denial-of-service condition, compromising the operational integrity of the affected systems.

Affected Version(s)

MGU21 MGU21_22-07 firmware with BCM89359 wireless chipset; LMP Version: 5.0 (0x9); LMP Subversion: 0x420d

References

https://www.zerodayinitiative.com/advisories/ZDI-25-251/
x_research-advisory

CVSS V3.0

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-3885 : Denial-of-Service Vulnerability in Harman Becker MGU21 Bluetooth Devices