CVE-2025-59452

Publication date

2025-10-06 00:00:00

Family

mitre

State

PUBLISHED

Description

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a devices MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.