Lucene search
MitreCVE-2023-47882HistoryDec 27, 2023 - 9:15 p.m.
CVE-2023-47882
2023-12-2721:15:08
mitre
web.nvd.nist.gov
21
cve-2023-47882
kami vision yi
iot
com.yunyi.smartcamera
android
remote code execution
implicit intent
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
30.3%
The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.
Affected configurations
Node
kamivisionyi_iotRange≤4.1.9_20231127android
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kamivision | yi_iot | * | cpe:2.3:a:kamivision:yi_iot:*:*:*:*:*:android:*:* |
Related
cvelist
cvelist
CVE-2023-47882
2023-12-27 00:00:00
nvd
nvd
CVE-2023-47882
2023-12-27 21:15:08
prion
prion
Code injection
2023-12-27 21:15:00
githubexploit
githubexploit
Exploit for CVE-2023-34761
2023-01-21 01:57:05
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
30.3%
Related for CVE-2023-47882