Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-59449 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to remotely operate affected devices if the attacker obtains the associated device IDs. Because YoLink device IDs are predictable, an attacker can exploit this to gain full control over any other YoLink user's devices.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:5.9 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CNA: [email protected]CVSS-B:4.9 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://bishopfox.com/blog/advisories	[email protected]	Advisory
https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home	[email protected]	ExploitTechnical Analysis
https://shop.yosmart.com/pages/product-support	[email protected]	Vendor
https://shop.yosmart.com/pages/sa-2025-001	[email protected]

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-863	Incorrect Authorization	[email protected]

Affected Products

Product	Versions
YoSmart YoLink MQTT broker	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart YoLink Hub	0382
CPE cpe:2.3:h:yosmart:yolink_hub:::::::: Remediation No remediation found in references.
YoSmart Smart Lock M1	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Lock M2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Lock M3	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Alarm Controller 1	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Alarm Controller 2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Alarm Controller X3	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart AlarmFob	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Bulldog Valve Robot	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Contact Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Dimmer Switch	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart DimmerFob	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Door Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart EVO Valve Operator	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Finger Garage Door Controller 2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart FlexFob	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart FlexSwitch	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart FlowSmart Control	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart FlowSmart Meter	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart FlowSmart All-In-One	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Garage Door Controller 1	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Garage Door Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart In-Wall Outlet	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart In-Wall Switch	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart In-Wall Switch 2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart IR Remote	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Motion Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Motorized Valve	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart OnOffFob	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Outdoor Alarm Controller	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Outdoor Contact Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Outdoor Motion Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Outdoor Plug	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Outdoor Energy Plug	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Plug Mini	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Plug w/Power Monitoring	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Energy Plug 15A	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Pool Thermometer	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Power Fail Alarm	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Power Strip	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Relay	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Relay Switch	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Siren Alarm	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart SirenFob	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Motorized Valve	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Lock M1	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Lock M2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smart Lock M3	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart SmokeCO Alarm	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Smoke Alarm	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart SpeakerHub	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Sprinkler Controller	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Temperature & Humidity Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Temperature & Humidity Sensor, Weatherproof	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Temperature Sensor, Weatherproof	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Outdoor Temperature & Humidity Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Outdoor Temperature Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Temperature & Humidity Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Thermostat	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Thermostat 2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Uno Camera	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Valve Controller 1	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Valve Controller 2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Valve Controller	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Valve Controller	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Vibration Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Water Depth Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Water Leak Sensor 1	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Water Leak Sensor 2	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Water Leak Sensor 3	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Water Leak Sensor 4	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart Water Level Monitoring Sensor	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Alarm Controller	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Valve Controller	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Temp/Humidity Sensors	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
YoSmart X3 Smart Motorized Valve	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 26, 2025	CVE Modified	[email protected]
Oct 6, 2025	New CVE Received	[email protected]

CVE-2025-59449 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE