PatchTheCVEdm2 firmware vulnerabilities and fixes
Recent CVEs affecting dm2 firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: dm2firmware.
dm2 firmware has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-03. Highest priority: CVE-2025-14224 (score 34/100).
- CVE-2025-14224 MEDIUM 4.3 UPGRADE UPGRADE A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12
- CVE-2025-69430 MEDIUM 6.1 UPGRADE UPGRADE An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version e
FAQ
How do I fix dm2 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dm2 firmware being exploited right now?
None of the tracked dm2 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dm2 firmware CVE should I patch first?
CVE-2025-14224 currently ranks highest (34/100): A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12.