PatchTheCVECVE-2025-69969: A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol
CVE-2025-69969 is a critical-severity flaw (CVSS 9.6) affecting pebble prism ultra firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is exploitable over Bluetooth Low Energy (BLE) proximity (Adjacent), requiring no physical contact with the device. Furthermore, the vulnerability is not
Why this priority
- Critical severity
- Public exploit reference
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-69969?
pebble prism ultra firmware: upgrade to 2.5.8. Exact commands for each OS are on this page.
Is CVE-2025-69969 being exploited?
CVE-2025-69969 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-69969 affect?
CVE-2025-69969 affects pebble prism ultra firmware. Severity is critical (CVSS 9.6). A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary comman
How urgent is CVE-2025-69969?
Priority 49/100. Critical severity; Public exploit reference