Vulnerability · Published May 12, 2025 · Assigned by CERTVDE
CVE-2025-3496AUMA Riester: Buffer overflow in service telegram
High 7.5
In plain English
A high-severity buffer overflow in AC1.2 from Auma Riester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 52.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Auma Riester | AC1.2 | 06.00.00 – before 06.09.04 |
| Auma Riester | MEC 03.01 | 0 – before 01.02.00 |
| Auma Riester | PROFOX | 0 – before 01-01.10.00 |
| Auma Riester | SGx/SVx | 03.00.00 – before 03.05.01 |
| Auma Riester | TIGRON | 0 – before 01-01.09.00 |
| Auma Riester | TIGRON SIL | 0 – before 02-01.01.00 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H