CVE-2025-65855: Cleartext Transmission of Sensitive Information

The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...

CVE-2025-65855

The Netun Solutions HelpFlash IoT emergency signaling device (firmware v18_178_221102_ASCII_PRO_1R5_50 and earlier) is vulnerable to arbitrary code execution due to flaws in its OTA firmware update mechanism. The system relies on hard-coded WiFi credentials (SSID: HF-UpdateAP-5JvqFV, Password: HF...