CVE-2025-30514
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 639
Summary
CVE-2025-30514 is a newly disclosed vulnerability that allows unauthenticated attackers to gain restricted access to information regarding a user's smart device collections, specifically "scenes," on affected devices. This issue can result in potential privacy concerns as attackers can view details about the configuration and arrangement of a user's connected devices without proper authorization. The exact cause of the vulnerability remains undisclosed, but users are advised to update their devices as soon as patches become available to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cloud Applications