{"id":69780,"date":"2025-09-01T01:15:01","date_gmt":"2025-09-01T01:15:01","guid":{"rendered":""},"modified":"2025-10-23T02:49:28","modified_gmt":"2025-10-23T08:49:28","slug":"cve-2025-52351-aikaan-iot-management-platform-password-exposure-vulnerability","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-52351-aikaan-iot-management-platform-password-exposure-vulnerability\/","title":{"rendered":"CVE-2025-52351: Aikaan IoT Management Platform Password Exposure Vulnerability<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The Common Vulnerabilities and Exposures (CVE) system has recently exposed a new vulnerability, CVE-2025-52351, which poses a serious threat to users of the Aikaan IoT management platform. This vulnerability involves the practice of sending newly generated passwords to users in plaintext via email, and also including the same password as a query parameter in the account activation URL. As a result, the password can be exposed via<\/a> browser history, proxy logs, referrer headers, and email caching. This vulnerability particularly affects user credential<\/a> confidentiality during the initial onboarding process, and it is crucial for users to be aware of this risk and take appropriate measures to mitigate it.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-52351
\nSeverity: High (CVSS: 8.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n