Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Yiiot records in CISA KEVNo Yiiot vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01257 · Published 2025-04-21 · No fix listed CWE-22
Priority HIGH 82
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01518 · Published 2025-04-21 · No fix listed CWE-285
