CVE-2025-44612: Tinxy Wifi Lock Controller v1 Rf Firmware

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack.

Affected products

• Tinxy Wifi Lock Controller v1 Rf Firmware: affected versions not specified

Published 2025-05-30. Last modified 2026-06-17.