CVE-2025-29659

Published Apr 21, 2025 CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Description

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:yiiot:xy-3820_firmware:6.0.24.10:*:*:*:*:*:*:*

cpe:2.3:h:yiiot:xy-3820:-:*:*:*:*:*:*:*

No data.

No data available yet.

No solution or workaround provided in the CVE record

Source	ID	Title
EUVD	EUVD-2025-12376	Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.

No CVSS v4.0

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 1.5% (1.518% probability within 30 days)

References

Link	Providers
https://github.com/Yasha-ops/RCE-YiIOT
https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-29659

History

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00812}`	epss `{'score': 0.00599}`

Type	Values Removed	Values Added
First Time appeared		Yiiot Yiiot xy-3820 Yiiot xy-3820 Firmware
CPEs		cpe:2.3:h:yiiot:xy-3820:-:::::::* cpe:2.3:o:yiiot:xy-3820_firmware:6.0.24.10:::::::*
Vendors & Products		Yiiot Yiiot xy-3820 Yiiot xy-3820 Firmware

Type	Values Removed	Values Added
Weaknesses		CWE-285
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.
References		https://github.com/Yasha-ops/RCE-YiIOT https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-29659