Yi

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Yi records in CISA KEV

No Yi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Yi Car Dashcam Firmware · all components

TI-2024-37695 CVE-2024-56897 · GHSA-v8m2-qqpw-r35m

MEDIUM 43

Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00747 Published 2025-02-24 No fix listed CWE-434