CVE-2025-28169

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack.

Published 2025-04-23. Last modified 2026-06-17.