{"id":"CVE-2025-41725","kind":"vulnerability","aliases":["CVE-2025-41725"],"related":[],"title":"Devices on firmware before 4.1.0 crash on malformed Bluetooth messages","description":"Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.","summary":"Affected devices running firmware older than 4.1.0 can crash and stop working when they receive specific malformed Bluetooth messages. An unauthenticated attacker nearby can cause the outage without any credentials.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bluetooth","firmware","infrastructure","iot-devices"],"not_affected_if":["bluetooth-disabled","firmware-4.1.0-or-later"],"how_to_check":"- Check the device's current firmware version in its admin or settings screen and compare it with `4.1.0`","fix":"- Move affected devices to firmware `4.1.0` or later","status":"open","published_at":"2026-11-13T13:17:38+00:00","first_seen_at":"2026-11-13T13:46:51+00:00","triaged_at":"2026-11-13T13:48:01+00:00","updated_at":"2026-11-13T13:48:01+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-13T13:48:01Z","model":"claude-haiku-5-5","output":{"fix":"- Move affected devices to firmware `4.1.0` or later\n- unknown","reach":"network","title":"Devices on firmware before 4.1.0 crash on malformed Bluetooth messages","impact":"low","summary":"Affected devices running firmware older than 4.1.0 can crash and stop working when they receive specific malformed Bluetooth messages. An unauthenticated attacker nearby can cause the outage without any credentials.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["bluetooth","firmware","iot-devices"],"confidence":0.5,"fix_status":"available","needs_auth":"no","worst_case":"device crashes and becomes unavailable until restarted","analyst_note":"Identify the affected device models and confirm the Bluetooth attack range from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2025-41725.","how_to_check":"- Check the device's current firmware version in its admin or settings screen and compare it with `4.1.0`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["firmware-4.1.0-or-later","bluetooth-disabled"],"who_is_affected":"Devices that run firmware older than 4.1.0 and have Bluetooth enabled are exposed to the malformed-message crash. The sources do not name the device models, so teams should check which of their devices use Bluetooth and what firmware they run. Devices already on 4.1.0 or later are not affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000737,"input_tokens":4512,"output_tokens":572,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':12A,15A '-41725':13A,16A '4.1.0':5A,29B,60C 'affect':23B,53C 'attack':44B,75C 'becom':64C 'bluetooth':9A,17B,40B,70C 'caus':47B 'crash':6A,31B,62C 'credenti':52B 'cve':11A,14A 'devic':1A,22B,24B,54C 'firmwar':3A,18B,26B,56C 'infrastructur':19B 'iot':21B 'iot-devic':20B 'malform':8A,39B,69C 'may':61C 'messag':10A,41B,71C 'nearbi':45B 'older':27B 'outag':49B 'prior':58C 'receiv':37B,67C 'run':25B,55C 'specif':38B,68C 'stop':33B 'unauthent':43B,74C 'unavail':65C 'version':57C 'without':50B 'work':34B","nicknames":[],"mitigations":[],"who_affected":"Devices that run firmware older than 4.1.0 and have Bluetooth enabled are exposed to the malformed-message crash. The sources do not name the device models, so teams should check which of their devices use Bluetooth and what firmware they run. Devices already on 4.1.0 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["bluetooth","firmware","infrastructure","iotdevices","medium"],"campaign_type":null,"search_a":"'-2025':12A,15A '-41725':13A,16A '4.1.0':5A 'bluetooth':9A 'crash':6A 'cve':11A,14A 'devic':1A 'firmwar':3A 'malform':8A 'messag':10A","search_b":"'4.1.0':29B 'affect':23B 'attack':44B 'bluetooth':17B,40B 'caus':47B 'crash':31B 'credenti':52B 'devic':22B,24B 'firmwar':18B,26B 'infrastructur':19B 'iot':21B 'iot-devic':20B 'malform':39B 'messag':41B 'nearbi':45B 'older':27B 'outag':49B 'receiv':37B 'run':25B 'specif':38B 'stop':33B 'unauthent':43B 'without':50B 'work':34B","search_c":"'4.1.0':60C 'affect':53C 'attack':75C 'becom':64C 'bluetooth':70C 'crash':62C 'devic':54C 'firmwar':56C 'malform':69C 'may':61C 'messag':71C 'prior':58C 'receiv':67C 'run':55C 'specif':68C 'unauthent':74C 'unavail':65C 'version':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T13:17:38+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"info@cert.vde.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-41725","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41725","severity":null,"published_at":"2026-11-13T13:17:38+00:00","modified_at":"2026-11-13T13:17:38+00:00","first_seen_at":"2026-11-13T13:46:51+00:00","fetched_at":"2026-11-13T13:46:51+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}