CVE Vulnerabilities

CVE-2025-59452

Generation of Predictable Numbers or Identifiers

Published: Oct 06, 2025 | Modified: Oct 06, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a devices MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.

Weakness

The product uses a scheme that generates numbers or identifiers that are more predictable than required.

References