CVE-2025-65297: High severity Aqara Hub G3 vulnerability
Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 automatically collect and upload unencrypted sensitive information. Note that this occurs without disclosure or consent from the manufacturer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65297?
CVE-2025-65297 is classified as a high severity vulnerability due to the automatic collection and uploading of unencrypted sensitive information.
How do I fix CVE-2025-65297?
To mitigate CVE-2025-65297, update your Aqara Hub devices to the latest firmware version that addresses this vulnerability.
Which Aqara Hub devices are affected by CVE-2025-65297?
CVE-2025-65297 affects the Aqara Camera Hub G3, Hub M2, and Hub M3 devices.
What type of data is impacted by CVE-2025-65297?
CVE-2025-65297 involves the unauthorized collection and upload of sensitive information without user consent.
Is user consent required for data collection in CVE-2025-65297?
No, CVE-2025-65297 indicates that data is collected and uploaded without disclosure or consent from users.