Aqara Hub Firmware Vulnerability

The Aqara Hub is a smart home device that allows users to control and monitor their devices remotely. The vulnerability in the firmware update process of the Camera Hub G3, Hub M2, and Hub M3 devices allows attackers to install malicious firmware without proper verification, exposing information through improperly initialized memory.

You're affected if you use Multiple vulnerabilities. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

To fix this vulnerability, you can:

1. Update to a patched firmware version by contacting Aqara support directly.
   • URL: https://www.aqara.com/support/
2. Immediate mitigations:
   • Restrict network access to your Aqara Hub device (firewall it from the public internet)
   • Audit admin account activity for suspicious access patterns
   • Monitor for unauthorized firmware updates

• github.com