This vulnerability affects the Bluetooth component of Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N, resulting in missing authentication controls. The attack vector requires an attacker to be on the local network, and the complexity of exploitation is high. No further technical details or exploit methods have been disclosed. The vendor has not provided any response or patch information.

The missing authentication in the Bluetooth component could allow an attacker on the local network to bypass authentication mechanisms. However, due to the high complexity of exploitation and low CVSS score (2.3), the practical impact is limited. There are no known exploits in the wild, and the vulnerability does not appear to enable significant privilege escalation or data compromise based on available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, organizations should limit local network access to the affected device and monitor for unusual Bluetooth activity as a precaution.