Lucene search
HistoryDec 27, 2023 - 9:15 p.m.
CVE-2023-47882
kami vision yi
iot
remote code execution
implicit intent
android
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
30.3%
The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.
Affected configurations
Node
kamivisionyi_iotRange≤4.1.9_20231127android
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kamivision | yi_iot | * | cpe:2.3:a:kamivision:yi_iot:*:*:*:*:*:android:*:* |
Related
cvelist
cvelist
CVE-2023-47882
2023-12-27 00:00:00
cve
cve
CVE-2023-47882
2023-12-27 21:15:08
prion
prion
Code injection
2023-12-27 21:15:00
githubexploit
githubexploit
Exploit for CVE-2023-34761
2023-01-21 01:57:05
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
30.3%
Related for NVD:CVE-2023-47882