CVE-2026-30613

MEDIUM

AZIOT 1 Node Smart Switch 1.1.9 - Info Disclosure

Title source: llm

Description

An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface. An attacker with physical access can connect to the UART interface and obtain sensitive information from the serial console without authentication.

References (2)

http://aziot.com

https://github.com/dumbermore/tuya/blob/main/README.md

View Writeup ZIP pw:eip

Scores

CVSS v3 4.6

EPSS 0.0003

EPSS Percentile 8.0%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Published Apr 06, 2026

Tracked Since Apr 06, 2026