ГлавнаяУязвимости → CVE-2025-65297
7.5высокая

CVE-2025-65297

Описание

Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 automatically collect and upload unencrypted sensitive information. Note that this occurs without disclosure or consent from the manufacturer.

Затрагиваемое ПО
Aqara Hub m2 firmwareAqara Hub m2Aqara Hub m3 firmwareAqara Hub m3Aqara Camera hub g3 firmwareAqara Camera hub g3
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Источники
https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/Unauthorized-Data-Upload.md