PT-2026-3937 · Atomberg · Atomberg Erica Smart Fan

Published 2026-01-22 · Updated 2026-02-02 · CVE-2025-69822

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Atomberg Atomberg Erica Smart Fan Firmware version V1.0.36

Description A flaw exists in Atomberg Atomberg Erica Smart Fan Firmware that could allow an attacker to gain sensitive information and increase their access level. This is achieved by sending a specially designed deauth frame.

Recommendations Update to a newer version of the firmware that addresses this issue.

Exploit

Fix

Improper Access Control

Information Disclosure

Improper Authentication

Weakness Enumeration

CWE-294

CWE-284

CWE-200

CWE-287

Related Identifiers

CVE-2025-69822

Affected Products

Atomberg Erica Smart Fan

References · 7

• 🔥❌ https://github.com/CipherX1802/CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment.git · Exploit, Deleted
• 🔥 https://github.com/CipherX1802/CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment/blob/main/Atomberg_Erica_SmatFan_Security_Assessment_Report.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2025-69822 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69822 · Security Note
• https://t.me/cveNotify/150639 · Telegram Post
• https://twitter.com/CVEnew/status/2014366272004190719 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2014292139094528126 · Twitter Post