YI Technology YI Home
Approved changes feed: RSS · Atom
cpe:2.3:a:yitechnology:yi_home:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Yitechnology (4334f56d-a2aa-5752-9a5e-7fe2fa743e41) |
|---|---|
| Product | Yi Home (8a66fe4a-62f2-53b3-a573-c1f5ae901a89) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3947 |
vulnerable | 2026-06-08 05:11:41.465286 |
Details available
CRITICAL (9)
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T21:57:21.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3935 |
vulnerable | 2026-06-08 05:11:41.432352 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T04:57:24.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3910 |
vulnerable | 2026-06-08 05:11:41.410793 |
Details available
HIGH (8.8)
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-17T03:13:27.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3900 |
vulnerable | 2026-06-08 05:11:41.405899 |
Details available
CRITICAL (9.1)
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR code to trigger this vulnerability. Alternatively, a user could be convinced to display a QR code from the internet to their camera, which could exploit this vulnerability.
Published: 2018-11-01T15:00:00.000Z
Updated: 2024-09-16T23:26:08.601Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.