CVE-2025-29659
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 21, 2025
Updated: Apr 23, 2025
CWE ID 285
Summary
CVE-2025-29659 is a remote command execution vulnerability affecting the Yi IOT XY-3820 device with firmware version 6.0.24.10. The issue lies within the "cmd_listen" function present in the "cmd" binary. Malicious actors can exploit this vulnerability to execute arbitrary commands on the affected device remotely, potentially leading to unauthorized access or data theft. Users are advised to update their firmware to a version free of this vulnerability to secure their devices from potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.