CVE-2025-65292: Command Injection
Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 allows attackers to execute arbitrary commands with root privileges through malicious domain names.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65292?
CVE-2025-65292 is classified as a critical vulnerability due to the potential for arbitrary command execution with root privileges.
How do I fix CVE-2025-65292?
To mitigate CVE-2025-65292, update your Aqara Hub devices to the latest firmware version that addresses this vulnerability.
Which devices are affected by CVE-2025-65292?
CVE-2025-65292 affects Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025.
What are the implications of exploiting CVE-2025-65292?
Exploitation of CVE-2025-65292 could allow an attacker to execute arbitrary commands on affected devices, compromising their security and functionality.
Is CVE-2025-65292 a remote vulnerability?
Yes, CVE-2025-65292 can be exploited remotely through malicious domain names, making it particularly dangerous.