Affected Products and Remediation
Most COROS watches and bike computers; tested version: PACE 3 ≤ 3.0808.0. Remediation: update the watch firmware to the official security patch version.
Description and Impact
During Bluetooth pairing, the device declares that it has no input or output capabilities, resulting in the use of Just Works pairing without pairing authentication. An attacker within Bluetooth range can carry out a man-in-the-middle attack and interact with the device without authorization. Exploitation requires the attacker to be within Bluetooth communication range.
Mitigation Measures
Update your watch firmware to the latest version. For initial pairing, choose a secure, non-public environment and confirm that the watch is connected to your own phone and the COROS App.
Acknowledgments
We thank the following researcher for their contribution to product security:
- Moritz Abrell (SySS GmbH)
Revision History
v1.0 ｜ 2026-10-13