Lucene search
PRIOn knowledge basePRION:CVE-2018-3910HistoryNov 01, 2018 - 3:29 p.m.
Command injection
2018-11-0115:29:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
38.2%
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yi_home_camera_firmware | eq | 1.8.70100 |
Related
talos
talos
Yi Technology Home Camera 27US cloudAPI SSID Code Execution Vulnerability
2018-10-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Yi Technology Home Camera cloudAPI SSID Code Execution (CVE-2018-3910)
2018-11-07 00:00:00
cve
cve
CVE-2018-3910
2018-11-01 15:29:00
cvelist
cvelist
CVE-2018-3910
2018-10-31 00:00:00
nvd
nvd
CVE-2018-3910
2018-11-01 15:29:00
talosblog
talosblog
threatpost
threatpost
Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
2018-11-01 21:50:15