Yi

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Yi records in CISA KEV

No Yi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Yi Home · all components

TI-2018-02869 CVE-2018-3900 · GHSA-6795-hw55-9w45

MEDIUM 43

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02582 Published 2018-11-01 No fix listed CWE-119

TI-2018-02915 CVE-2018-3947 · GHSA-p6vg-q7p3-vh4v

LOW 38

An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01257 Published 2018-11-01 No fix listed CWE-200

TI-2018-02878 CVE-2018-3910 · GHSA-7969-vfgw-xwqv

LOW 38

An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01635 Published 2018-11-01 No fix listed CWE-78

TI-2018-02903 CVE-2018-3935 · GHSA-5pvq-774f-gxc7

LOW 37

An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02253 Published 2018-11-02 No fix listed CWE-400