Yeelight

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yeelight records in CISA KEV

No Yeelight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smart Ai Speaker Firmware 1 record LOW Smart Lamp Firmware 1 record MEDIUM Yeelight Classic 1 record MEDIUM

Records

3 records

TI-2025-07510 CVE-2025-8210 · GHSA-wv4p-g5wh-v3wf

Yeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components

MEDIUM 55

A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00265 Published 2025-07-26 No fix listed CWE-926

TI-2023-22515 CVE-2023-42189 · GHSA-gg6j-gxcg-jjcm

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK…

MEDIUM 41

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2023-10-10 No fix listed CWE-732

TI-2018-14186 CVE-2018-20007 · GHSA-3pw5-pqx4-4928

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART…

LOW 31

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00487 Published 2019-05-16 No fix listed CWE-732

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0