CVE-2025-62235

Published
View on NVD ↗
CVSS v3
8.1
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade to version 1.9.0, which fixes the issue.

Apache mynewt
GitHubGitHub
874