CVE-2025-59450

Summary

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials.

Affected Software

Weaknesses

• CWE-312: CWE-312 Cleartext Storage of Sensitive Information

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bishopfox.com/blog/advisories
• https://shop.yosmart.com/pages/product-support
• https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home

• ←Previous
• Next→