YI Technology YI Home Camera
Approved changes feed: RSS · Atom
cpe:2.3:h:yitechnology:yi_home_camera:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Yitechnology (4334f56d-a2aa-5752-9a5e-7fe2fa743e41) |
|---|---|
| Product | Yi Home Camera (e2747508-cf00-5754-9efd-9a6c7979b4a1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3947 |
not_vulnerable | 2026-06-08 05:11:41.465166 |
Details available
CRITICAL (9)
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T21:57:21.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3935 |
not_vulnerable | 2026-06-08 05:11:41.432333 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3934 |
not_vulnerable | 2026-06-08 05:11:41.431961 |
Details available
CRITICAL (9)
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a logic flaw, resulting in an authentication bypass. An attacker can sniff network traffic and send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3928 |
not_vulnerable | 2026-06-08 05:11:41.426389 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T20:58:52.752Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3920 |
not_vulnerable | 2026-06-08 05:11:41.414493 |
Details available
HIGH (7.6)
An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3910 |
not_vulnerable | 2026-06-08 05:11:41.410677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3900 |
not_vulnerable | 2026-06-08 05:11:41.404757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3899 |
not_vulnerable | 2026-06-08 05:11:41.401290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3898 |
not_vulnerable | 2026-06-08 05:11:41.400854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3892 |
not_vulnerable | 2026-06-08 05:11:41.398503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3891 |
not_vulnerable | 2026-06-08 05:11:41.398014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3890 |
not_vulnerable | 2026-06-08 05:11:41.397573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.