Coros Pace 3 Firmware vulnerabilities
6 known vulnerabilities in Coros Pace 3 Firmware from Yftech. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
Coros Pace 3 Firmware: Out-of-bounds Read
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot.
- 7.5 High severity
Coros Pace 3 Firmware: NULL Pointer Dereference
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot.
- 9.8 Critical severity
Coros Pace 3 Firmware: Cleartext Transmission of Sensitive Information
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and
- 8.8 High severity
Coros Pace 3 Firmware: Improper Authentication
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It starts advertising if no device is connected via Bluetooth. This allows an attacker to connect with the device via BLE if no other device is connected. While connected, none of the BLE servic
- 9.8 Critical severity
Coros Pace 3 Firmware: Improper Certificate Validation
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for downloading firmware files. Before downloading firmware files, the watch requests some information about the
- 9.8 Critical severity
Coros Pace 3 Firmware: Improper Authentication
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefo