Lucene search
PRIOn knowledge basePRION:CVE-2018-3890HistoryNov 02, 2018 - 5:29 p.m.
Command injection
2018-11-0217:29:00
PRIOn knowledge base
www.prio-n.com
3
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker can insert an SD card to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yi_home_camera_firmware | eq | 1.8.70100 |
Related
cvelist
cvelist
CVE-2018-3890
2018-11-02 17:00:00
talos
talos
Yi Technology Home Camera 27US Firmware Update Code Execution Vulnerability
2018-10-31 00:00:00
nvd
nvd
CVE-2018-3890
2018-11-02 17:29:00
cve
cve
CVE-2018-3890
2018-11-02 17:29:00
threatpost
threatpost
Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
2018-11-01 21:50:15