CVE-2024-54982

EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products.

Published 2024-12-19. Last modified 2026-06-17.