Atomberg Erica Smart Fan Privilege Escalation and Information Disclosure Vulnerability

A vulnerability in the Atomberg Erica Smart Fan firmware version 1.0.36 allows an attacker to escalate privileges and access sensitive information by sending a crafted deauthentication frame. This issue stems from inadequate protection against forged deauthentication frames and a lack of validation for fallback or reconnection processes on the device, which can disrupt the fan's operation and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation and disruption of the fan's normal operation, causing availability issues.