CVE-2018-3934

The CVE-2018-3934 issue affects Yi Home Camera 27US, firmware 1.8.7.0D, via the firmware update path. Cisco Talos describes a nonce reuse/authentication bypass vulnerability in the p2p_tnp UDP protocol: an attacker sniffing traffic can craft UDP packets to trigger a logic flaw, bypass authenticat...