{"id":69780,"date":"2025-09-01T01:15:01","date_gmt":"2025-09-01T01:15:01","guid":{"rendered":""},"modified":"2025-10-23T02:49:28","modified_gmt":"2025-10-23T08:49:28","slug":"cve-2025-52351-aikaan-iot-management-platform-password-exposure-vulnerability","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-52351-aikaan-iot-management-platform-password-exposure-vulnerability\/","title":{"rendered":"CVE-2025-52351: Aikaan IoT Management Platform Password Exposure Vulnerability<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The Common Vulnerabilities and Exposures (CVE) system has recently exposed a new vulnerability, CVE-2025-52351, which poses a serious threat to users of the Aikaan IoT management platform. This vulnerability involves the practice of sending newly generated passwords to users in plaintext via email, and also including the same password as a query parameter in the account activation URL. As a result, the password can be exposed via<\/a> browser history, proxy logs, referrer headers, and email caching. This vulnerability particularly affects user credential<\/a> confidentiality during the initial onboarding process, and it is crucial for users to be aware of this risk and take appropriate measures to mitigate it.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-52351
\nSeverity: High (CVSS: 8.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n