Yi Technology
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:yi_technology:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Yi Technology (fc5ccb37-5292-5bf5-849d-bfdff59f9615) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3935 |
vulnerable | 2026-06-08 05:11:41.432272 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3934 |
vulnerable | 2026-06-08 05:11:41.431812 |
Details available
CRITICAL (9)
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a logic flaw, resulting in an authentication bypass. An attacker can sniff network traffic and send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3920 |
vulnerable | 2026-06-08 05:11:41.414348 |
Details available
HIGH (7.6)
An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3899 |
vulnerable | 2026-06-08 05:11:41.401145 |
Details available
HIGH (8.3)
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the password_dst field
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3898 |
vulnerable | 2026-06-08 05:11:41.400804 |
Details available
HIGH (8.3)
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the ssid_dst field.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3892 |
vulnerable | 2026-06-08 05:11:41.398445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3891 |
vulnerable | 2026-06-08 05:11:41.397949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3890 |
vulnerable | 2026-06-08 05:11:41.396450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.