{"id":29244,"date":"2025-12-08T03:10:05","date_gmt":"2025-12-08T03:10:05","guid":{"rendered":"http:\/\/localhost\/?p=29244"},"modified":"2025-12-08T03:10:05","modified_gmt":"2025-12-08T03:10:05","slug":"yottamaster-dm2dm3dm200-file-upload-path-traversal","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=29244","title":{"rendered":"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224"},"content":{"rendered":"

{“lastseen”:””,”description”:”A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23\/1.9.12. Affected by this issue is some unknown functionality of the component File Upload. Performing manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.”,”published”:”2025-12-08T08:32:06.058Z”,”modified”:”2025-12-08T08:32:06.058Z”,”type”:”cve”,”title”:”Yottamaster DM2\/DM3\/DM200 File Upload path traversal”,”source”:”VulDB”,”references”:”https:\/\/vuldb.com\/?id.334666\\nhttps:\/\/vuldb.com\/?ctiid.334666\\nhttps:\/\/vuldb.com\/?submit.701673\\nhttps:\/\/www.notion.so\/2b76cf4e528a80f6ae50fe21b13ff0b8″,”id”:”CVE-2025-14224″,”bulletinFamily”:””,”cwe”:[“CWE-22″],”cvelist”:null,”sourceData”:”Yottamaster DM2 1.2.0\\nYottamaster DM2 1.2.1\\nYottamaster DM2 1.2.2\\nYottamaster DM2 1.2.3\\nYottamaster DM2 1.2.4\\nYottamaster DM2 1.2.5\\nYottamaster DM2 1.2.6\\nYottamaster DM2 1.2.7\\nYottamaster DM2 1.2.8\\nYottamaster DM2 1.2.9\\nYottamaster DM2 1.2.10\\nYottamaster DM2 1.2.11\\nYottamaster DM2 1.2.12\\nYottamaster DM2 1.2.13\\nYottamaster DM2 1.2.14\\nYottamaster DM2 1.2.15\\nYottamaster DM2 1.2.16\\nYottamaster DM2 1.2.17\\nYottamaster DM2 1.2.18\\nYottamaster DM2 1.2.19\\nYottamaster DM2 1.2.20\\nYottamaster DM2 1.2.21\\nYottamaster DM2 1.2.22\\nYottamaster DM2 1.2.23\\nYottamaster DM2 1.9.0\\nYottamaster DM2 1.9.1\\nYottamaster DM2 1.9.2\\nYottamaster DM2 1.9.3\\nYottamaster DM2 1.9.4\\nYottamaster DM2 1.9.5\\nYottamaster DM2 1.9.6\\nYottamaster DM2 1.9.7\\nYottamaster DM2 1.9.8\\nYottamaster DM2 1.9.9\\nYottamaster DM2 1.9.10\\nYottamaster DM2 1.9.11\\nYottamaster DM2 1.9.12\\nYottamaster DM3 1.2.0\\nYottamaster DM3 1.2.1\\nYottamaster DM3 1.2.2\\nYottamaster DM3 1.2.3\\nYottamaster DM3 1.2.4\\nYottamaster DM3 1.2.5\\nYottamaster DM3 1.2.6\\nYottamaster DM3 1.2.7\\nYottamaster DM3 1.2.8\\nYottamaster DM3 1.2.9\\nYottamaster DM3 1.2.10\\nYottamaster DM3 1.2.11\\nYottamaster DM3 1.2.12\\nYottamaster DM3 1.2.13\\nYottamaster DM3 1.2.14\\nYottamaster DM3 1.2.15\\nYottamaster DM3 1.2.16\\nYottamaster DM3 1.2.17\\nYottamaster DM3 1.2.18\\nYottamaster DM3 1.2.19\\nYottamaster DM3 1.2.20\\nYottamaster DM3 1.2.21\\nYottamaster DM3 1.2.22\\nYottamaster DM3 1.2.23\\nYottamaster DM3 1.9.0\\nYottamaster DM3 1.9.1\\nYottamaster DM3 1.9.2\\nYottamaster DM3 1.9.3\\nYottamaster DM3 1.9.4\\nYottamaster DM3 1.9.5\\nYottamaster DM3 1.9.6\\nYottamaster DM3 1.9.7\\nYottamaster DM3 1.9.8\\nYottamaster DM3 1.9.9\\nYottamaster DM3 1.9.10\\nYottamaster DM3 1.9.11\\nYottamaster DM3 1.9.12\\nYottamaster DM200 1.2.0\\nYottamaster DM200 1.2.1\\nYottamaster DM200 1.2.2\\nYottamaster DM200 1.2.3\\nYottamaster DM200 1.2.4\\nYottamaster DM200 1.2.5\\nYottamaster DM200 1.2.6\\nYottamaster DM200 1.2.7\\nYottamaster DM200 1.2.8\\nYottamaster DM200 1.2.9\\nYottamaster DM200 1.2.10\\nYottamaster DM200 1.2.11\\nYottamaster DM200 1.2.12\\nYottamaster DM200 1.2.13\\nYottamaster DM200 1.2.14\\nYottamaster DM200 1.2.15\\nYottamaster DM200 1.2.16\\nYottamaster DM200 1.2.17\\nYottamaster DM200 1.2.18\\nYottamaster DM200 1.2.19\\nYottamaster DM200 1.2.20\\nYottamaster DM200 1.2.21\\nYottamaster DM200 1.2.22\\nYottamaster DM200 1.2.23\\nYottamaster DM200 1.9.0\\nYottamaster DM200 1.9.1\\nYottamaster DM200 1.9.2\\nYottamaster DM200 1.9.3\\nYottamaster DM200 1.9.4\\nYottamaster DM200 1.9.5\\nYottamaster DM200 1.9.6\\nYottamaster DM200 1.9.7\\nYottamaster DM200 1.9.8\\nYottamaster DM200 1.9.9\\nYottamaster DM200 1.9.10\\nYottamaster DM200 1.9.11\\nYottamaster DM200 1.9.12″,”sourceHref”:””,”cvss”:{“score”:5.3,”severity”:”MEDIUM”,”vector”:”CVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:N\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N\/E:P”,”version”:”4.0″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”DM2″,”version”:”1.2.0″,”vendor”:”Yottamaster”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"

{“lastseen”:””,”description”:”A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23\/1.9.12. Affected by this issue is some unknown functionality of the component File…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,22,12,21,13,7,11,5],"class_list":["post-29244","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-53","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nYottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=29244\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{“lastseen”:””,”description”:”A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23\/1.9.12. Affected by this issue is some unknown functionality of the component File...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=29244\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-08T03:10:05+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Yottamaster DM2\\\/DM3\\\/DM200 File Upload path traversal_CVE-2025-14224\",\"datePublished\":\"2025-12-08T03:10:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244\"},\"wordCount\":438,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-5.3\",\"exploit\",\"MEDIUM\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=29244#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244\",\"name\":\"Yottamaster DM2\\\/DM3\\\/DM200 File Upload path traversal_CVE-2025-14224 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-12-08T03:10:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=29244\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=29244#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Yottamaster DM2\\\/DM3\\\/DM200 File Upload path traversal_CVE-2025-14224\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=29244","og_locale":"en_US","og_type":"article","og_title":"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224 - zero redgem","og_description":"{“lastseen”:””,”description”:”A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23\/1.9.12. Affected by this issue is some unknown functionality of the component File...","og_url":"https:\/\/zero.redgem.net\/?p=29244","og_site_name":"zero redgem","article_published_time":"2025-12-08T03:10:05+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=29244#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=29244"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224","datePublished":"2025-12-08T03:10:05+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=29244"},"wordCount":438,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-5.3","exploit","MEDIUM","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=29244#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=29244","url":"https:\/\/zero.redgem.net\/?p=29244","name":"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-12-08T03:10:05+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=29244#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=29244"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=29244#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Yottamaster DM2\/DM3\/DM200 File Upload path traversal_CVE-2025-14224"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/29244","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=29244"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/29244\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29244"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}