CVE-2025-67399

CVE-2025-67399 漏洞摘要 AIRTH Smart Home AQI Monitor 使用基于 BK7231N 芯片组的 CB3S 蓝牙 SoC，软件版本号为 2.1.17。通过物理接触设备并识别 SoC，利用公开的数据手册定位了暴露的 UART 调试/编程引脚。直接通过 USB 转 TTL 转换器及供应商提供的工具连接这些引脚，可实现对芯片内存的未受限读取访问。因此，无需任何身份验证或安全检查即可提取完整固件。该问题源于缺少硬件级保护措施，例如禁用调试接口、读取保护或安全启动，从而通过 UART 接口实现未经授权的固件和内存访问。 总体 CVSS 评分：6.8 CVSS 3...

CVE-2025-67399

An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device is open to access...

CVE-2025-67399

An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device is open to access...

CVE-2025-67399

An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device is open to access...

CVE-2025-67399

The AIRTH SMART HOME AQI MONITOR (Bootloader v.1.005) is vulnerable to the unauthorized extraction of sensitive information and full firmware. A physically proximate attacker can exploit exposed UART debug/programming pins on the BK7231N controller (Wi-Fi and BLE module). Due to a lack of hardwar...

CVE-2025-67399: Exposure of Sensitive Information to an Unauthorized Actor

An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device is open to access...

PT-2026-2908

Name of the Vulnerable Software and Affected Versions AIRTH SMART HOME AQI MONITOR Bootloader version 1.005 Description An issue allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device. The UART port is...