CVE-2025-59447

LowCVSS 2.2

Published: 06/10/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can read a boot log that includes network access credentials.

Risk Assessment

A person with physical access to the device can obtain network credentials, enabling further attacks on the network where the device is deployed. The risk mainly affects environments where the device is not physically secured.

Recommendation

Restrict physical access to the device and the UART interface, e.g., by securing the enclosure and placing it in a controlled environment. Contact the vendor for guidance on securing the debug interface.

Other vulnerabilities in YoLink Smart Hub

CVE-2025-59450Medium
The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials. The lack of encryption exposes sensitive information.

Original NVD description (English source)

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS