Bluetooth Device Vulnerability Exposing Maintenance User Passwords in Data Logging Systems

CVE-2025-41690

What is CVE-2025-41690?

A vulnerability exists in certain Bluetooth-enabled data logging systems, which allows low-privileged attackers within Bluetooth range to view event logs. By exploiting this weakness, an attacker can potentially access the password of a higher-privileged user, specifically one with Maintenance access. This unauthorized visibility poses a risk, as it enables an attacker to authenticate as the Maintenance user, granting them access to sensitive configurations and the ability to modify critical device parameters.

References