{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-9994", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2025-09-04T15:31:44.614Z", "datePublished": "2025-09-09T13:01:05.384Z", "dateUpdated": "2025-09-09T13:01:05.384Z"}, "containers": {"cna": {"title": "Amp\u2019ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not require authentication", "descriptions": [{"lang": "en", "value": "The Amp\u2019ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing unauthorized access to anyone with network access."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Amped RF", "product": "BT-AP 111", "versions": [{"status": "affected", "version": "*"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}, {"descriptions": [{"lang": "en", "description": "CWE-287 Improper Authentication"}]}], "references": [{"url": "https://www.ampedrftech.com/guides/BT-AP111_UserManual.pdf"}], "x_generator": {"engine": "VINCE 3.0.24", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2025-9994"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2025-09-09T13:01:05.384Z"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The Amp\u2019ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing unauthorized access to anyone with network access."}], "id": "CVE-2025-9994", "lastModified": "2025-09-09T16:28:43.660", "metrics": {}, "published": "2025-09-09T14:15:49.943", "references": [{"source": "cret@cert.org", "url": "https://www.ampedrftech.com/guides/BT-AP111_UserManual.pdf"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Awaiting Analysis"}

{}

{}