critical9.8
CVE-2025-29659
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.
Impact
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yiiot | Xy-3820 Firmware | Version 6.0.24.10 |