CVE-2025-29659

Description

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.

Affected Platforms

Weakness Type

CWE-285

References

• https://github.com/Yasha-ops/RCE-YiIOT
• https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-29659
• https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-29659