high8.0
CVE-2018-3910
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D.
Impact
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yitechnology | Yi Home Camera Firmware | Version 1.8.7.0d |
| Yitechnology | Yi Home | All versions |