Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 devices, allow attackers to install malicious firmware without proper verification. The device fails to validate firmware signatures during updates, uses outdated cryptographic methods that can be exploited to forge valid signatures, and exposes information through improperly initialized memory.
References
| Link | Resource |
|---|---|
| https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/OTA-Firmware-Insecurity.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
17 Dec 2025, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:aqara:hub_m2_firmware:4.3.6_0027:*:*:*:*:*:*:* cpe:2.3:h:aqara:hub_m2:-:*:*:*:*:*:*:* cpe:2.3:o:aqara:hub_m3_firmware:4.3.6_0025:*:*:*:*:*:*:* cpe:2.3:h:aqara:camera_hub_g3:-:*:*:*:*:*:*:* cpe:2.3:o:aqara:camera_hub_g3_firmware:4.1.9_0027:*:*:*:*:*:*:* cpe:2.3:h:aqara:hub_m3:-:*:*:*:*:*:*:* |
|
| First Time |
Aqara hub M3
Aqara hub M2 Aqara camera Hub G3 Firmware Aqara hub M2 Firmware Aqara hub M3 Firmware Aqara Aqara camera Hub G3 |
|
| References | () https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/OTA-Firmware-Insecurity.md - Exploit, Third Party Advisory |
11 Dec 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CWE | CWE-326 CWE-347 CWE-457 |
10 Dec 2025, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-10 22:16
Updated : 2025-12-17 19:49
NVD link : CVE-2025-65295
Mitre link : CVE-2025-65295
CVE.ORG link : CVE-2025-65295
JSON object : View
Products Affected
aqara
- hub_m3
- camera_hub_g3
- hub_m2
- hub_m3_firmware
- camera_hub_g3_firmware
- hub_m2_firmware