Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: Yi Component: Yi Home Camera Firmware Clear all filters
TI-2018-02903 CVE-2018-3935 · GHSA-5pvq-774f-gxc7

Uncontrolled resource consumption in Yi Technology

Priority LOW 37

An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02253 Published 2018-11-02 No fix listed CWE-400
TI-2018-02868 CVE-2018-3899 · GHSA-vf4h-fgx2-j38f

Buffer overflow in Yi Technology

Priority LOW 37

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01932 Published 2018-11-02 No fix listed CWE-120
TI-2018-02867 CVE-2018-3898 · GHSA-g5cj-f5gq-pmgm

Buffer overflow in Yi Technology

Priority LOW 37

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01932 Published 2018-11-02 No fix listed CWE-120
TI-2018-02861 CVE-2018-3892 · GHSA-fwpr-995q-w5qh

Buffer overflow in Yi Technology

Priority MEDIUM 40

An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02655 Published 2018-11-02 No fix listed CWE-120
TI-2018-02859 CVE-2018-3890 · GHSA-7q2c-44rw-vxcc

OS command injection in Yi Technology

Priority LOW 33

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01672 Published 2018-11-02 No fix listed CWE-78
TI-2018-02915 CVE-2018-3947 · GHSA-p6vg-q7p3-vh4v

Information disclosure in Yi Technology

Priority LOW 38

An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01257 Published 2018-11-01 No fix listed CWE-200
TI-2018-02896 CVE-2018-3928 · GHSA-6wgc-v7v8-fh58

Information disclosure in Yi Technology

Priority LOW 37

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02253 Published 2018-11-01 No fix listed CWE-200
TI-2018-02878 CVE-2018-3910 · GHSA-7969-vfgw-xwqv

OS command injection in Yi Technology

Priority LOW 38

An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01635 Published 2018-11-01 No fix listed CWE-78
TI-2018-02869 CVE-2018-3900 · GHSA-6795-hw55-9w45

Memory corruption in Yi Technology

Priority MEDIUM 43

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02582 Published 2018-11-01 No fix listed CWE-119