CyberSec.Space Logo
返回 CVE 浏览器

CVE-2018-3890

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.1620%
EPSS Percentile38.08th
Published2018年11月2日
Last Modified2024年11月21日

Vulnerability Description

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker can insert an SD card to trigger this vulnerability.

Affected Platforms (CPE)

💻
Yitechnology

Yi Home Camera Firmware

= 1.8.7.0d

References & Advisories

🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0565
🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0565

相关漏洞威胁

CVE-2018-39349.8

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A special...

CVE-2018-202999.8

An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware befor...

CVE-2018-38928.1

An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specia...

CVE-2018-39287.5

An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A special...