Yi Technology
Approved changes feed: RSS · Atom
cpe:2.3:a:yi:yi_technology:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Yi (ff6657a6-117c-5892-8b9d-e1da6fed8a2f) |
|---|---|
| Product | Yi Technology (76fed6b6-030e-5a87-b110-513c67b894d7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3947 |
vulnerable | 2026-06-08 05:11:41.465106 |
Details available
CRITICAL (9)
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T21:57:21.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3928 |
vulnerable | 2026-06-08 05:11:41.426241 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T20:58:52.752Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3910 |
vulnerable | 2026-06-08 05:11:41.410623 |
Details available
HIGH (8.8)
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-17T03:13:27.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3900 |
vulnerable | 2026-06-08 05:11:41.404680 |
Details available
CRITICAL (9.1)
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR code to trigger this vulnerability. Alternatively, a user could be convinced to display a QR code from the internet to their camera, which could exploit this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T23:26:08.601Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.