High · published December 11, 2025
⚡ The firmware update process for Aqara Hub devices has some serious flaws, allowing attackers to slip in malicious firmware without breaking a sweat! 😱 Think of it like a restaurant that serves dishes without checking the ingredients — anyone could sneak in a toxic ingredient and ruin the meal for everyone. That's exactly what this vulnerability allows in your Aqara Hub! An attacker could remotely install harmful firmware, resulting in unauthorized access to your connected devices, compromising your security, and potentially spying on you through your own cameras. It's a nightmare scenario where your once-trusty hub turns into a digital spy for malicious actors!
Think of it like a restaurant that serves dishes without checking the ingredients — anyone could sneak in a toxic ingredient and ruin the meal for everyone. That's exactly what this vulnerability allows in your Aqara Hub! This vulnerability arises from the firmware not validating signatures during updates, allowing attackers to forge valid signatures using outdated cryptographic methods. It also exposes sensitive information through improperly initialized memory, increasing the attack surface.
An attacker could remotely install harmful firmware, resulting in unauthorized access to your connected devices, compromising your security, and potentially spying on you through your own cameras. It's a nightmare scenario where your once-trusty hub turns into a digital spy for malicious actors! Update your Aqara Hub firmware to the latest versions: Camera Hub G3 4.1.9_0028, Hub M2 4.3.6_0028, and Hub M3 4.3.6_0026 to patch these vulnerabilities. Ensure that you disable any outdated cryptographic methods and regularly audit your device’s security settings. 🛡️ You've got this! With these updates, you can safeguard your smart home and keep those digital intruders at bay! 🔐
| Product | Versions | Fixed in |
|---|---|---|
| aqara/hub_m2_firmware | all versions | — |
| aqara/hub_m3_firmware | all versions | — |
| aqara/camera_hub_g3_firmware | all versions | — |