Vulnerabilities > CVE-2023-47882 - Unspecified vulnerability in Kamivision YI IOT 4.1.920231127

047910
CVSS 7.1 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
local
low complexity
kamivision

Summary

The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.

Vulnerable Configurations

Part Description Count
Application
Kamivision
2