Skip to content
OpenAdvisories
Critical · 9.6 CVE-2018-3892 EUVD-2018-15678GHSA-fwpr-995q-w5qh

An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially craft…

Published Nov 2, 2018 · Updated Aug 5, 2024 · Assigned by talos

Description

An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Yi Technology Yi Technology Home Camera 27US 1.8.7.0D —

References