Vulnerabilities

TI-2026-03889 CVE-2026-4478 · GHSA-mp64-rm5r-c35p

Yi Technology YI Home Camera HTTP Firmware Update ipc signature verification

HIGH 75

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00288 Published 2026-03-20 No fix listed CWE-345

TI-2026-03888 CVE-2026-4477 · GHSA-4mwf-8qvq-c4w5

Yi Technology YI Home Camera WPA/WPS hard-coded key

LOW 11

A vulnerability was determined in Yi Technology YI Home Camera 2 2.1.1_20171024151200.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00218 Published 2026-03-20 No fix listed CWE-320

TI-2026-03887 CVE-2026-4476 · GHSA-qrw2-p44v-4f43

Yi Technology YI Home Camera CGI Endpoint ipc missing authentication

LOW 24

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00315 Published 2026-03-20 No fix listed CWE-287

TI-2026-03886 CVE-2026-4475 · GHSA-wvgq-3vx9-4r52

Yi Technology YI Home Camera ipc hard-coded credentials

HIGH 73

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00298 Published 2026-03-20 No fix listed CWE-259

TI-2024-37695 CVE-2024-56897 · GHSA-v8m2-qqpw-r35m

Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted…

MEDIUM 43

Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00747 Published 2025-02-24 No fix listed CWE-434

TI-2018-02903 CVE-2018-3935 · GHSA-5pvq-774f-gxc7

Uncontrolled resource consumption in Yi Technology

LOW 37

An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02253 Published 2018-11-02 No fix listed CWE-400

TI-2018-02902 CVE-2018-3934 · GHSA-57rq-jwm6-m8pv

An exploitable code execution vulnerability exists in the firmware update functionality…

MEDIUM 47

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02633 Published 2018-11-02 No fix listed

TI-2018-02888 CVE-2018-3920 · GHSA-r65w-5jgv-h7gj

An exploitable code execution vulnerability exists in the firmware update functionality…

LOW 31

An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00586 Published 2018-11-02 No fix listed

TI-2018-02868 CVE-2018-3899 · GHSA-vf4h-fgx2-j38f

Buffer overflow in Yi Technology

LOW 37

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01932 Published 2018-11-02 No fix listed CWE-120

TI-2018-02867 CVE-2018-3898 · GHSA-g5cj-f5gq-pmgm

Buffer overflow in Yi Technology

LOW 37

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01932 Published 2018-11-02 No fix listed CWE-120

TI-2018-02861 CVE-2018-3892 · GHSA-fwpr-995q-w5qh

Buffer overflow in Yi Technology

MEDIUM 40

An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02655 Published 2018-11-02 No fix listed CWE-120

TI-2018-02860 CVE-2018-3891 · GHSA-2vx9-h65m-6rg8

An exploitable firmware downgrade vulnerability exists in the firmware update…

LOW 21

An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00402 Published 2018-11-02 No fix listed

TI-2018-02859 CVE-2018-3890 · GHSA-7q2c-44rw-vxcc

OS command injection in Yi Technology

LOW 33

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01672 Published 2018-11-02 No fix listed CWE-78

TI-2018-02915 CVE-2018-3947 · GHSA-p6vg-q7p3-vh4v

Information disclosure in Yi Technology

LOW 38

An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01257 Published 2018-11-01 No fix listed CWE-200

TI-2018-02896 CVE-2018-3928 · GHSA-6wgc-v7v8-fh58

Information disclosure in Yi Technology

LOW 37

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02253 Published 2018-11-01 No fix listed CWE-200

TI-2018-02878 CVE-2018-3910 · GHSA-7969-vfgw-xwqv

OS command injection in Yi Technology

LOW 38

An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01635 Published 2018-11-01 No fix listed CWE-78

TI-2018-02869 CVE-2018-3900 · GHSA-6795-hw55-9w45

Memory corruption in Yi Technology

MEDIUM 43

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02582 Published 2018-11-01 No fix listed CWE-119

Vulnerabilities

Filters