VulnerabilityAwaiting Analysis

CVE-2026-30613

An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface.

MEDIUM 4.6EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface. An attacker with physical access can connect to the UART interface and obtain sensitive information from the serial console without authentication.

CVSS 3.1: 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.17% probability · 6th percentile
CISA KEV: Not listed
Weakness: CWE-200
Source: cve@mitre.org

References

https://github.com/dumbermore/tuya/blob/main/README.md

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.