PatchTheCVEyiiot vulnerabilities
Recent CVEs affecting yiiot products. 2 tracked.
yiiot has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-04-21. Highest priority: CVE-2025-29659 (score 66/100).
- CVE-2025-29660 CRITICAL 9.8 MITIGATE A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on
- CVE-2025-29659 CRITICAL 9.8 MITIGATE Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in th
FAQ
How do I fix yiiot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yiiot being exploited right now?
None of the tracked yiiot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yiiot CVE should I patch first?
CVE-2025-29659 currently ranks highest (66/100): Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in th.