CVE-2025-65295 Weak cryptography in n/a
Attackers can install malicious firmware on Aqara hubs due to weak signature validation and outdated cryptography, leading to code execution and information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-65295?
CVE-2025-65295 is a high-severity vulnerability in n/a, published on 10 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 devices, allow attackers to install malicious firmware without proper verification. The device fails to validate firmware signatures during updates, uses outdated cryptographic methods that can be exploited to forge valid signatures, and exposes information through improperly initialized memory.
Which versions are affected by CVE-2025-65295?
It affects 3 products.
Products include Aqara Camera Hub G3 Firmware, Aqara Hub M2 Firmware, Aqara Hub M3 Firmware.
How do I fix CVE-2025-65295?
No fix has been published for CVE-2025-65295 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-65295 being exploited?
There is no known exploitation of CVE-2025-65295 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f4fh-mr9x-pqgf.