CVE-2025-2189

Name of the Vulnerable Software and Affected Versions Tinxy smart devices (affected versions not specified)

Description The issue exists due to the storage of credentials in plaintext within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext credentials stored on the vulnerable device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.