CVE-2025-59450 MEDIUM

CVE-2025-59450

Vendor Yosmart
Product YoLink Smart Hub
Weakness CWE-312 · Cleartext storage
Published October 6, 2025
Last update October 6, 2025
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials.

Key dates

02Disclosure timeline

October 6, 2025 CVE published
October 6, 2025 Record updated