CVE-2025-44612

MEDIUM

Tinxy WiFi Lock Controller v1 RF - Cleartext Transmission of Sensitive Information

Title source: llm

Description

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack.

References (1)

Core 1

Core References

Third Party Advisory

https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29

Scores

CVSS v3 5.9

EPSS 0.0017

EPSS Percentile 6.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-319

Status published

Products (1)

tinxy/wifi_lock_controller_v1_rf_firmware

Published May 30, 2025

Tracked Since Feb 18, 2026