CVE-2025-44557

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairing_failed packet.

Published 2025-06-27. Last modified 2026-06-17.