CVE-2025-8393 — Dreame Technology iOS and Android Mobile Applications Improper Certificate Validation
A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communicati…
Published: 2025-08-08 · CVSS: 8.5 · CVSS 4.0
A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentials and sensitive session tokens.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7