Vulnerabilities > Yitechnology > YI Home Camera Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2018-11-02 CVE-2018-3935 Resource Exhaustion vulnerability in Yitechnology YI Home and YI Home Camera Firmware
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D.
network
low complexity
yitechnology CWE-400
7.5
2018-11-02 CVE-2018-3899 Classic Buffer Overflow vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.
network
high complexity
yitechnology CWE-120
7.5
2018-11-02 CVE-2018-3898 Classic Buffer Overflow vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.
network
high complexity
yitechnology CWE-120
7.5
2018-11-02 CVE-2018-3892 Classic Buffer Overflow vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D.
network
high complexity
yitechnology CWE-120
8.1
2018-11-01 CVE-2018-3947 Information Exposure vulnerability in Yitechnology YI Home and YI Home Camera Firmware
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D.
network
high complexity
yitechnology CWE-200
8.1
2018-11-01 CVE-2018-3928 Information Exposure vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.
network
low complexity
yitechnology CWE-200
7.5
2018-11-01 CVE-2018-3910 OS Command Injection vulnerability in Yitechnology YI Home and YI Home Camera Firmware
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.
low complexity
yitechnology CWE-78
8.0
2018-11-01 CVE-2018-3900 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Yitechnology YI Home and YI Home Camera Firmware
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.
network
low complexity
yitechnology CWE-119
8.8