Vulnerability Description
Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gateway communications, enabling man-in-the-middle attacks on device control and monitoring.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Aqara | Hub M2 Firmware | 4.3.6_0027 |
| Aqara | Hub M2 | - |
| Aqara | Hub M3 Firmware | 4.3.6_0025 |
| Aqara | Hub M3 | - |
| Aqara | Camera Hub G3 Firmware | 4.1.9_0027 |
| Aqara | Camera Hub G3 | - |
Related Weaknesses (CWE)
References
- https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/CoAP-Certificate-ValExploitThird Party Advisory
FAQ
What is CVE-2025-65291?
CVE-2025-65291 is a vulnerability with a CVSS score of 7.4 (HIGH). Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gateway communication...
How severe is CVE-2025-65291?
CVE-2025-65291 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-65291?
Check the references section above for vendor advisories and patch information. Affected products include: Aqara Hub M2 Firmware, Aqara Hub M2, Aqara Hub M3 Firmware, Aqara Hub M3, Aqara Camera Hub G3 Firmware.