Vulnerabilities > CVE-2018-3891 - Unspecified vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D

047910
CVSS 4.6 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
low complexity
yitechnology
NVD
Published: 2018-11-02
Updated: 2023-02-02

Summary

An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
OS
Yitechnology
1
Hardware
Yitechnology
1

Talos

idTALOS-2018-0566
last seen2019-05-29
published2018-10-31
reporterTalos Intelligence
sourcehttp://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0566
titleYi Technology Home Camera 27US Firmware Downgrade Vulnerability

References