CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without…

Critical · published May 30, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

🚨 An open Wi-Fi network lets anyone join the party! The Tinxy WiFi Lock Controller v1 RF is broadcasting without any authentication, making it a prime target for sneaky intruders. 🔥 Think of it like leaving your front door wide open during a big BBQ—anyone on the block can walk in, grab your snacks, and cause chaos without you even noticing! This oversight could allow attackers to connect to your home automation system, potentially controlling your smart locks or spying on your activities. The consequences could be absolutely devastating, compromising your privacy and security without breaking a sweat.

Put simply

Think of it like leaving your front door wide open during a big BBQ—anyone on the block can walk in, grab your snacks, and cause chaos without you even noticing! The vulnerability arises because the Tinxy WiFi Lock Controller is configured to transmit on an open Wi-Fi network, allowing unauthorized users to join without needing to authenticate.

What to do

This oversight could allow attackers to connect to your home automation system, potentially controlling your smart locks or spying on your activities. The consequences could be absolutely devastating, compromising your privacy and security without breaking a sweat. To secure your system, change the Wi-Fi settings to require authentication and ensure that encryption is enabled. Additionally, check for any firmware updates from the manufacturer to address this critical issue as soon as possible. You've got this! Follow these steps to lock things down and keep your smart home safe. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Published
2025-05-30T00:00Z
EPSS history
Timeline
  • 30 MAY 00:00Z
    Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without…
    cvelistv5