CVE-2025-69822

An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a…

High · published January 22, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

⚡ An attacker can exploit a crafted deauth frame to snag sensitive information and escalate their privileges on Atomberg Erica Smart Fan Firmware v1.0.36! 🔥 Think of it like a sneaky guest at a party who figures out how to reroute the music playlist, taking over the DJ booth without anyone noticing — it's all fun and games until they start playing the wrong tunes! If an attacker successfully exploits this vulnerability, they could gain unauthorized access to sensitive information and escalate their privileges, potentially controlling critical fan settings or accessing private data. This could lead to privacy breaches or even manipulation of the fan's functionality, which is pretty unsettling for any smart home!

Put simply

Think of it like a sneaky guest at a party who figures out how to reroute the music playlist, taking over the DJ booth without anyone noticing — it's all fun and games until they start playing the wrong tunes! This vulnerability in Atomberg Erica Smart Fan allows an attacker to craft a deauth frame, effectively tricking the firmware into revealing sensitive information and enabling privilege escalation.

What to do

If an attacker successfully exploits this vulnerability, they could gain unauthorized access to sensitive information and escalate their privileges, potentially controlling critical fan settings or accessing private data. This could lead to privacy breaches or even manipulation of the fan's functionality, which is pretty unsettling for any smart home! To protect your smart fan from this vulnerability, update the firmware to the latest version immediately. Regularly monitor for updates and consider changing any default settings to increase security. Don't leave your smart home devices vulnerable! You've got this! Stay vigilant and keep your devices secure. 🛡️

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.2th percentile
Published
2026-01-22T00:00Z
EPSS history
Timeline
  • 22 JAN 00:00Z
    An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a…
    cvelistv5