CVE-2025-59447

Impact

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://bishopfox.com/blog/advisories
• https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home
• https://shop.yosmart.com/pages/product-support