CVE-2025-69821

An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause a denial of service via the BLE connection

High · published January 22, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

⚡ A simple Bluetooth Low Energy (BLE) connection can be your smartwatch's undoing! The Beat XP VEGA Smartwatch firmware has a sneaky vulnerability ready to cause a denial of service. 🔥 Think of it like a traffic jam caused by a single car that refuses to move; the BLE connection gets overloaded and all the smart features of your watch stall, leaving you frustrated and unable to access your notifications or health data. If an attacker takes advantage of this vulnerability, your smartwatch could be rendered useless, cutting you off from important alerts and fitness tracking. Imagine missing a critical notification or health update because your smartwatch just decided to take a permanent nap!

Put simply

Think of it like a traffic jam caused by a single car that refuses to move; the BLE connection gets overloaded and all the smart features of your watch stall, leaving you frustrated and unable to access your notifications or health data. The vulnerability in Beat XP VEGA Smartwatch allows an attacker to exploit the BLE connection, causing a denial of service by overwhelming the device with requests, interrupting its normal operation.

What to do

If an attacker takes advantage of this vulnerability, your smartwatch could be rendered useless, cutting you off from important alerts and fitness tracking. Imagine missing a critical notification or health update because your smartwatch just decided to take a permanent nap! To mitigate this risk, ensure that your smartwatch firmware is updated to the latest version released by the manufacturer. Regularly check for updates and consider disabling BLE features when not in use to limit exposure. You've got this! With a little vigilance and timely updates, your smartwatch will stay secure and functional. 🛡️

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.5th percentile
Published
2026-01-22T00:00Z
EPSS history
Timeline
  • 22 JAN 00:00Z
    An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause a denial of service via the BLE connection
    cvelistv5