CVE-2025-59447

Severity: low (CVSS 2.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-06 · updated 2026-10-09
Weakness: CWE-497

Description

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials.

Affected products

YoSmart YoLink Smart Hub: 0382

References

https://bishopfox.com/blog/advisories
https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home
https://shop.yosmart.com/pages/product-support

Get alerted when CVE-2025-59447 or the next vulnerability affects your stack