CVE-2025-65296

Several Aqara smart home products are susceptible to NULL-pointer dereference vulnerabilities during JSON processing . Specifically, these issues affect the Aqara Hub M2 (version 4.3.6_0027) , Hub M3 (version 4.3.6_0025) , and Camera Hub G3 (version 4.1.9_0027) . An attacker can provide malformed...

CVE-2025-65294: Improper Control of Generation of Code

Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 contain an undocumented remote access mechanism enabling unrestricted remote command execution...

CVE-2025-65293

The Aqara Camera Hub G3 (version 4.1.9_0027 ) is susceptible to command injection vulnerabilities. An attacker can execute arbitrary commands with root privileges by providing malicious QR codes during the device setup or factory reset processes. This vulnerability originates from the improper ne...

CVE-2025-65293

Command injection vulnerabilities in Aqara Camera Hub G3 4.1.90027 allow attackers to execute arbitrary commands with root privileges through malicious QR codes during device setup and factory reset...

CVE-2025-65290: Improper Certificate Validation

Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 fail to validate server certificates during HTTPS firmware downloads, allowing man-in-the-middle attackers to intercept firmware update traffic and potentially serve modified firmware files...

CVE-2025-65297

Aqara Hub devices, specifically the Camera Hub G3 (version 4.1.9_0027), Hub M2 (version 4.3.6_0027), and Hub M3 (version 4.3.6_0025), are vulnerable to the automatic collection and upload of unencrypted sensitive information . This data transmission occurs without manufacturer disclosure or conse...

Aqara Camera Hub G3 安全漏洞

Aqara Camera Hub G3 is a smart surveillance camera from Aqara USA. A security vulnerability exists in Aqara Camera Hub G3 version 4.1.90027, which originates from a malicious QR code leading to a command injection that could result in the execution of arbitrary commands...

Aqara多款产品 安全漏洞

Aqara Camera Hub G3 and others are a smart surveillance camera from Aqara USA. A security vulnerability exists in various Aqara products, which stems from unvalidated server certificates in a TLS connection and could lead to a man-in-the-middle attack. The following products and versions are...

CVE-2025-65294

Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 contain an undocumented remote access mechanism enabling unrestricted remote command execution...

Aqara Camera Hub G3 安全漏洞

Aqara Camera Hub G3 is a smart surveillance camera from Aqara USA. A security vulnerability exists in Aqara Camera Hub G3 version 4.1.90027, Hub M2 version 4.3.60027, and Hub M3 version 4.3.60025, which stems from the failure to validate server certificates during HTTPS firmware downloads, which...

PT-2025-50541

Name of the Vulnerable Software and Affected Versions Aqara Hub devices versions 4.1.9 0027, 4.3.6 0027, and 4.3.6 0025 Description A command injection issue exists in Aqara Hub devices, including Camera Hub G3, Hub M2, and Hub M3. This allows attackers to execute arbitrary commands with root...

CVE-2025-65294

Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 contain an undocumented remote access mechanism enabling unrestricted remote command execution...

Aqara多款产品 安全漏洞

Aqara Camera Hub G3 and others are a smart surveillance camera from Aqara USA. A security vulnerability exists in various Aqara products that stems from a failure to verify signatures during firmware updates, which could lead to the installation of malicious firmware. The following products and...

CVE-2025-65294

Several Aqara Hub devices are vulnerable to a security flaw caused by an undocumented remote access mechanism . This vulnerability enables unrestricted remote command execution (CWE-94). Affected products and versions include the Camera Hub G3 (version 4.1.9_0027) , Hub M2 (version 4.3.6_0027) , ...

CVE-2025-65296

NULL-pointer dereference vulnerabilities in Aqara Hub M2 4.3.60027, Hub M3 4.3.60025, and Camera Hub G3 4.1.90027 in the JSON processing enable denial-of-service attacks through malformed JSON inputs...

Aqara多款产品 安全漏洞

Aqara Camera Hub G3 and others are a smart surveillance camera from Aqara USA. A security vulnerability exists in various Aqara products that stems from the presence of a null pointer dereference in JSON processing, which could lead to a denial of service attack. The following products and versio...

CVE-2025-65293: Improper Neutralization of Special Elements used in a Command

Command injection vulnerabilities in Aqara Camera Hub G3 4.1.90027 allow attackers to execute arbitrary commands with root privileges through malicious QR codes during device setup and factory reset...

Realtek RtsUpx Usb Utility Driver Access Control Error Vulnerability (CNVD-2021-91639)

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China.An access control error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's failure to device's IO control packet for permission detection. An...

Realtek RtsUpx Usb Utility Driver Access Control Error Vulnerability

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which originates when the product allows arbitrary reads and writes from physical memory via a...

Realtek RtsUpx Usb Utility Driver Resource Management Error Vulnerability

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China.A resource management error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's handling of IO control packets without proper memory boundary...