medium6.8
CVE-2018-3890
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.
Impact
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker can insert an SD card to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yitechnology | Yi Home Camera Firmware | Version 1.8.7.0d |