CVE-2025-32880 Information

Jun 21, 2025 cve

Description

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access the COROS Pace 3 downloads firmware files via HTTP. However the communication is not encrypted and allows sniffing and machine-in-the-middle attacks.

Reference

https://support.coros.com/hc/en-us/articles/20087694119828-COROS-PACE-3-Release-Notes https://syss.de https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-029.txt

CNNVD-202506-2827 (Published: 2025-06-20)

Share on: