BaseFortify

Publication date: 2025-10-02

Last updated on: 2025-10-27

Assigner: MITRE

Description

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect, causing a denial of service. The attack requires proximity to the device, making it exploitable from an adjacent network location.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-02

Last Modified

2025-10-27

Generated

2026-07-06

AI Q&A

2025-10-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-56019

EUVD

EUVD-2025-32596

Affected Vendors & Products

Vendor	Product	Version / Range
agasta	easy_touch_plus_firmware	9.3.97
agasta	easy_touch_plus	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-277	A product defines a set of insecure permissions that are inherited by objects that are created by the program.

Attack-Flow Graph

Impact Analysis

The vulnerability can impact you by allowing unauthorized mobile applications to connect to your Agasta Easytouch+ device without permission, which then prevents legitimate applications from connecting. This causes a denial of service, potentially disrupting normal device functionality and access.

Executive Summary

This vulnerability is an insecure permission issue in the Agasta Easytouch+ version 9.3.97 device. It allows unauthorized mobile applications to connect to the device via Bluetooth Low Energy (BLE) without requiring authentication. Once an unauthorized connection is made, legitimate applications cannot connect, resulting in a denial of service. The attack can only be performed from close physical proximity to the device.

Hi! I’m here to help you understand CVE-2025-56019. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70