PT-2025-23235 · Unknown · Tinxy Wifi Lock Controller

CVE-2025-44619 · Published 2025-05-30 · Updated 2026-07-05

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tinxy WiFi Lock Controller version v1 RF

Description The issue allows attackers to join the network without authentication because the device is configured to transmit on an open Wi-Fi network.

Recommendations For Tinxy WiFi Lock Controller version v1 RF, consider configuring the device to use a secure Wi-Fi network that requires authentication to prevent unauthorized access.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-44619

Affected Products

Tinxy Wifi Lock Controller

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2025-44619 · Security Note
• https://tinxy.in · Note
• http://tinxy.com · Note
• https://youtube.com/@hackthehardware · Note
• https://twitter.com/cracbot/status/1930218019646558536 · Twitter Post
• https://t.me/cveNotify/129833 · Telegram Post
• https://t.me/cvenotify/126138 · Telegram Post
• https://t.me/cveNotify/187319 · Telegram Post
• https://in.linkedin.com/company/kavach-iot-security · Note
• http://wifi.com · Note
• https://twitter.com/CVEnew/status/1928283149701677403 · Twitter Post
• https://t.me/cvenotify/129833 · Telegram Post
• https://t.me/cveNotify/188396 · Telegram Post
• https://t.me/cvetracker/24955 · Telegram Post
• https://t.me/cvenotify/124088 · Telegram Post