CVE-2025-66974: n/a
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase.
AI Analysis
Technical Summary
CVE-2025-66974 describes a security issue in the Prolink 13A Smart Plug Model DS-3202M-UKv3 and the associated mEzee 2.6.7 application. During the device provisioning phase, an attacker can supply a specially crafted packet that triggers a Denial of Service condition or causes the device to connect to an attacker-controlled device. No further technical details, such as exploitation methods or underlying root causes, are provided.
Potential Impact
Successful exploitation can lead to denial of service on the affected smart plug or manipulation of its network connection to an attacker-controlled device, potentially disrupting device functionality or enabling further attacks through the malicious connection.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No vendor advisory or patch information is provided at this time.
CVE-2025-66974: n/a
Description
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase.
CVSS v3.1
Score 7.5high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-66974 describes a security issue in the Prolink 13A Smart Plug Model DS-3202M-UKv3 and the associated mEzee 2.6.7 application. During the device provisioning phase, an attacker can supply a specially crafted packet that triggers a Denial of Service condition or causes the device to connect to an attacker-controlled device. No further technical details, such as exploitation methods or underlying root causes, are provided.
Potential Impact
Successful exploitation can lead to denial of service on the affected smart plug or manipulation of its network connection to an attacker-controlled device, potentially disrupting device functionality or enabling further attacks through the malicious connection.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No vendor advisory or patch information is provided at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2025-12-08T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6aa9812c55bf5e2cf527c2bc
Added to database: 09/15/2026, 17:32:28 UTC
Last enriched: 09/15/2026, 17:49:01 UTC
Last updated: 09/16/2026, 02:04:14 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.