CVE-2025-52351

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activation URL e.g., https://domain.com/activate=xyz. This practice can result in password exposure via...

PT-2025-34264 · Unknown · Aikaan Iot Management Platform

Name of the Vulnerable Software and Affected Versions: Aikaan IoT management platform version 3.25.0325-5-g2e9c59796 Description: The Aikaan IoT management platform sends newly generated passwords to users in plaintext via email. The same password is also included as a query parameter in the...

CVE-2025-52351

The Aikaan IoT management platform (version v3.25.0325-5-g2e9c59796 ) is vulnerable to credential exposure during the initial onboarding process. The platform sends newly generated passwords to users in plaintext via email and includes the same password as a query parameter in the account activat...