CVE-2025-65855

The Netun Solutions HelpFlash IoT (firmware v18_178_221102_ASCII_PRO_1R5_50 and prior) is vulnerable to arbitrary code execution via its OTA firmware update mechanism. The vulnerability stems from the use of hard-coded WiFi credentials (SSID and Password: HF-UpdateAP-5JvqFV) that are identical ac...

CVE-2025-65855: Cleartext Transmission of Sensitive Information

The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...