PatchTheCVEdm3 firmware vulnerabilities and fixes
Recent CVEs affecting dm3 firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: dm3firmware.
dm3 firmware has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-03. Highest priority: CVE-2025-14224 (score 34/100).
- CVE-2025-14224 MEDIUM 4.3 UPGRADE UPGRADE A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12
- CVE-2025-69430 MEDIUM 6.1 UPGRADE UPGRADE An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version e
FAQ
How do I fix dm3 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dm3 firmware being exploited right now?
None of the tracked dm3 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dm3 firmware CVE should I patch first?
CVE-2025-14224 currently ranks highest (34/100): A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12.