CVE-2025-65294: Code Injection
Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 contain an undocumented remote access mechanism enabling unrestricted remote command execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65294?
CVE-2025-65294 has a high severity due to its enabling of unrestricted remote command execution on affected Aqara Hub devices.
How do I fix CVE-2025-65294?
To fix CVE-2025-65294, update the affected Aqara Hub devices to the latest firmware version provided by the manufacturer.
Which Aqara Hub devices are affected by CVE-2025-65294?
CVE-2025-65294 affects Aqara Camera Hub G3, Hub M2, and Hub M3 models running specific firmware versions.
What consequences can arise from CVE-2025-65294?
CVE-2025-65294 may allow attackers to execute arbitrary commands remotely, compromising the security and integrity of the affected devices.
Is CVE-2025-65294 actively being exploited?
There are currently no public reports indicating active exploitation of CVE-2025-65294, but it remains a high risk due to its nature.