YI Technology YI Home Camera Firmware 1.8.7.0D
Approved changes feed: RSS · Atom
cpe:2.3:o:yitechnology:yi_home_camera_firmware:1.8.7.0d:*:*:*:*:*:*:*
part: o version: 1.8.7.0d update: *
| Vendor | Yitechnology (4334f56d-a2aa-5752-9a5e-7fe2fa743e41) |
|---|---|
| Product | Yi Home Camera Firmware (ed6c7c47-d9a3-5b23-9655-03a0a699d644) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3947 |
vulnerable | 2026-06-08 05:11:41.465137 |
Details available
CRITICAL (9)
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T21:57:21.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3935 |
vulnerable | 2026-06-08 05:11:41.432309 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3934 |
vulnerable | 2026-06-08 05:11:41.431939 |
Details available
CRITICAL (9)
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a logic flaw, resulting in an authentication bypass. An attacker can sniff network traffic and send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3928 |
vulnerable | 2026-06-08 05:11:41.426365 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T20:58:52.752Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3920 |
vulnerable | 2026-06-08 05:11:41.414376 |
Details available
HIGH (7.6)
An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3910 |
vulnerable | 2026-06-08 05:11:41.410655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3900 |
vulnerable | 2026-06-08 05:11:41.404731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3899 |
vulnerable | 2026-06-08 05:11:41.401267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3898 |
vulnerable | 2026-06-08 05:11:41.400833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3892 |
vulnerable | 2026-06-08 05:11:41.398480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3891 |
vulnerable | 2026-06-08 05:11:41.397989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3890 |
vulnerable | 2026-06-08 05:11:41.397039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.