CVEvulnerability

CVE-2025-69822

7.4 HIGH Published 2026-01-22 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2026-01-22
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weaknesses: CWE-200, CWE-284, CWE-287, CWE-294

Description

An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame

Affected configurations

• atomberg erica smart fan firmware 1.0.36

Weakness · CWE (4)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
CWE-284 Improper Access Control weakness
CWE-287 Improper Authentication weakness
CWE-294 Authentication Bypass by Capture-replay weakness

References

https://github.com/CipherX1802/CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment.git Third Party Advisory
https://github.com/CipherX1802/CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment/blob/main/Atomberg_Erica_SmatFan_Security_Assessment_Report.pdf Exploit, Third Party Advisory

CVE-2025-69822

Description

Affected configurations

Related

Weakness · CWE (4)

References