Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h9p4-p535-j9jg

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gateway communications, enabling man-in-the-middle attacks on device control and monitoring.

Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gateway communications, enabling man-in-the-middle attacks on device control and monitoring.

EPSS

Процентиль: 7%
0.00027
Низкий

7.4 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.4
nvd
около 2 месяцев назад

Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gateway communications, enabling man-in-the-middle attacks on device control and monitoring.

EPSS

Процентиль: 7%
0.00027
Низкий

7.4 High

CVSS3

Дефекты

CWE-295