Yottamaster records
2 published records for vendor yottamaster.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2025-69430No exploit | An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or prior to V1.9.12), yottamaster · dm2 firmware · CWE-59 | Medium6.1 | — | 0.3% | Feb 3, 2026 |
8Monitor | CVE-2025-14224No exploit | Yottamaster DM2/DM3/DM200 File Upload path traversalyottamaster · dm2 firmware · CWE-22 | Low2.1 | — | 0.7% | Dec 8, 2025 |
- CVE-2025-6943024Monitor
An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or prior to V1.9.12),
MediumCVSS 6.1No exploitEPSS 0%yottamaster · dm2 firmwareFeb 3, 2026
- CVE-2025-142248Monitor
Yottamaster DM2/DM3/DM200 File Upload path traversal
LowCVSS 2.1No exploitEPSS 0%yottamaster · dm2 firmwareDec 8, 2025