CVE-2025-30514

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 639

Summary

CVE-2025-30514 is a newly disclosed vulnerability that allows unauthenticated attackers to gain restricted access to information regarding a user's smart device collections, specifically "scenes," on affected devices. This issue can result in potential privacy concerns as attackers can view details about the configuration and arrangement of a user's connected devices without proper authorization. The exact cause of the vulnerability remains undisclosed, but users are advised to update their devices as soon as patches become available to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share