Security readout for executives and security teams
Plain-English summary
This CVE is about sensitive information exposure from an accessible UART interface on an AIRTH SMART HOME AQI MONITOR. It requires physical proximity, so it is not a remote internet-scale issue, but it can matter where devices are deployed in accessible spaces or may be stolen, serviced, or tampered with.
Executive priority
Address through asset inventory and physical-risk controls rather than emergency remote patching. Prioritize environments where these monitors are accessible to visitors, tenants, contractors, or adversaries. Business urgency rises if devices contain network credentials or operational identifiers.
Technical view
The CVE describes Bootloader v1.005 on an AIRTH SMART HOME AQI MONITOR using a BK7231N Wi-Fi/BLE controller. The UART port is open to access, allowing a physically proximate, unauthenticated attacker to obtain sensitive information. CVSS 3.1 is 4.6: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. CWE is CWE-200.
Likely exposure
Exposure appears limited to organizations using the specific AIRTH SMART HOME AQI MONITOR and affected bootloader version. The source bundle does not provide CPEs, vendor metadata, model ranges, or broader product applicability. Internet-facing exposure is not indicated because the attack vector is physical access.
Exploitation context
The bundle does not indicate CISA KEV listing or active exploitation. The practical risk is physical tampering, device theft, resale, maintenance access, or placement in public or semi-public areas. No remote exploitation path is described in the provided sources.
Researcher notes
Evidence is sparse. The CVE lists affected vendor/product fields as n/a, with detail mainly from the description and a GitHub-hosted PDF reference. Do not generalize this issue to all BK7231N devices or other AIRTH products without additional evidence.
Mitigation direction
- Inventory AIRTH SMART HOME AQI MONITOR devices and identify bootloader version 1.005.
- Check AIRTH or supplier guidance for patched firmware, hardware revisions, or official mitigations.
- Restrict physical access to deployed monitors, especially in public or shared spaces.
- Treat recovered, serviced, or returned devices as potentially exposed until assessed.
- Review stored secrets or identifiers if device compromise is suspected.
Validation and detection
- Confirm whether AIRTH SMART HOME AQI MONITOR units exist in asset inventories.
- Record firmware and bootloader versions for deployed and spare devices.
- Review deployment locations for realistic physical access by untrusted people.
- Check vendor channels for advisories referencing CVE-2025-67399.
- Document whether sensitive data is stored or exposed through device debug interfaces.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-200: Information exposure and cloud metadata lookup
Information exposure and SSRF weaknesses can make discovery, cloud metadata, and credential material review relevant. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2025-67399 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 4.6 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N0.93.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
4.6MediumVector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/rupeshsurve04/CVE-2025-67399/blob/main/AIRTH_SMART_HOME_AQI_MONITOR_CVE-2025-67399.pdfCVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.