CVE-2025-59450

MediumCVSS 4.3

Published: 06/10/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials. The lack of encryption exposes sensitive information.

Risk Assessment

An attacker with access to the firmware can obtain network credentials and gain unauthorized network access. This may lead to further security breaches.

Recommendation

Update the firmware to a version that encrypts data or apply compensating controls such as network segmentation. Monitor for unusual network traffic.

Other vulnerabilities in YoLink Smart Hub

CVE-2025-59447Low
The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can read a boot log that includes network access credentials.

Original NVD description (English source)

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS