Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 devices, allow attackers to install malicious firmware without proper verification. The device fails to validate firmware signatures during updates, uses outdated cryptographic methods that can be exploited to forge valid signatures, and exposes information through improperly initialized memory.
References
| Link | Resource |
|---|---|
| https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/OTA-Firmware-Insecurity.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
17 Dec 2025, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/OTA-Firmware-Insecurity.md - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:h:aqara:hub_m2:-:*:*:*:*:*:*:* cpe:2.3:o:aqara:hub_m3_firmware:4.3.6_0025:*:*:*:*:*:*:* cpe:2.3:h:aqara:camera_hub_g3:-:*:*:*:*:*:*:* cpe:2.3:h:aqara:hub_m3:-:*:*:*:*:*:*:* cpe:2.3:o:aqara:hub_m2_firmware:4.3.6_0027:*:*:*:*:*:*:* cpe:2.3:o:aqara:camera_hub_g3_firmware:4.1.9_0027:*:*:*:*:*:*:* |
|
| First Time |
Aqara hub M3
Aqara hub M3 Firmware Aqara camera Hub G3 Firmware Aqara Aqara hub M2 Aqara camera Hub G3 Aqara hub M2 Firmware |
11 Dec 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-326 CWE-347 CWE-457 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
10 Dec 2025, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-10 22:16
Updated : 2025-12-17 19:49
NVD link : CVE-2025-65295
Mitre link : CVE-2025-65295
CVE.ORG link : CVE-2025-65295
JSON object : View
Products Affected
aqara
- hub_m3
- camera_hub_g3_firmware
- hub_m2
- hub_m3_firmware
- hub_m2_firmware
- camera_hub_g3