Yiiot vulnerabilities
We track 1 vulnerability in Yiiot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Yiiot vulnerabilities
- 9.8 Critical severity
Xy-3820 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks proper input validation, allowing attackers to execute arbitrary scripts present on the device by sending specially craf