Skullcandy Dime 3 unauthorized Bluetooth pairing behavior

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-06 19:26 UTC
  • Importiert: 2026-08-06 20:11 UTC
  • CVSS: 8.8
  • Quelle-ID: full_disc
  • uid_hash: 90c12870a2380551b4a3e1ef4568c2ad388bc8aeb4098c347406a1d911c126bc

Inhalt

Posted by Jacob Nowak on Aug 06 Hello,

I am submitting the following security disclosure for publication on the

Full Disclosure mailing list.

Title: Pairing Without Consent: CVE-2025-20701 Behavior on Skullcandy Dime 3

Affected product:

Skullcandy Dime 3 wireless earbuds

Vulnerability:

Unauthorized Bluetooth Classic pairing and persistent bond creation

Description:

Testing demonstrated that a previously unknown Linux computer could pair

with a Skullcandy Dime 3 earbud set...

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-20701

HIGH

8.8

HIGH

8.8

2025-08-04

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

threat_intel - de https://seclists.org/rss/fulldisclosure.rss