Description
The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials.
Problem types
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
Product status
0382
References
shop.yosmart.com/pages/product-support
bishopfox.com/...20-smart-device-gave-me-access-to-your-home
