Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Yi Component: Yi Home Clear all filters
TI-2018-02903 CVE-2018-3935 · GHSA-5pvq-774f-gxc7

Uncontrolled resource consumption in Yi Technology

Priority LOW 37

An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02253 Published 2018-11-02 No fix listed CWE-400
TI-2018-02915 CVE-2018-3947 · GHSA-p6vg-q7p3-vh4v

Information disclosure in Yi Technology

Priority LOW 38

An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01257 Published 2018-11-01 No fix listed CWE-200
TI-2018-02878 CVE-2018-3910 · GHSA-7969-vfgw-xwqv

OS command injection in Yi Technology

Priority LOW 38

An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01635 Published 2018-11-01 No fix listed CWE-78
TI-2018-02869 CVE-2018-3900 · GHSA-6795-hw55-9w45

Memory corruption in Yi Technology

Priority MEDIUM 43

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02582 Published 2018-11-01 No fix listed CWE-119