Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Yiiot
Products
Xy-3820 Xy-3820 Firmware
CVE-2025-29660

A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks proper input validation, allowing attackers to execute arbitrary scripts present on the device by sending specially crafted TCP requests using directory traversal techniques.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Yiiot
Products
Xy-3820 Xy-3820 Firmware