CVE-2025-69822

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-69822
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame

7.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 4.0

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://github.com/CipherX1802/CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment.git Third Party Advisory
https://github.com/CipherX1802/CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment/blob/main/Atomberg_Erica_SmatFan_Security_Assessment_Report.pdf Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:atomberg:erica_smart_fan_firmware:1.0.36:*:*:*:*:*:*:*
cpe:2.3:h:atomberg:erica_smart_fan:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2026-01-22 16:16

Updated : 2026-02-02 20:11

NVD link : CVE-2025-69822

Mitre link : CVE-2025-69822

CVE.ORG link : CVE-2025-69822

JSON object : View

Products Affected

atomberg

  • erica_smart_fan
  • erica_smart_fan_firmware
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control

CWE-287

Improper Authentication

CWE-294

Authentication Bypass by Capture-replay