Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/11/2018 Updated: 02/02/2023

CVSS v2 Base Score: 5.4 | Impact Score: 6.4 | Exploitability Score: 5.5

CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1

VMScore: 481

Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P

An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yitechnology yi_home_camera_firmware 1.8.7.0d
yitechnology yi home -

CWE-78 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0580 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-3910

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect