PT-2018-16285 · Yi · Yi Home Camera

CVE-2018-3892

·

Publicado

2018-11-02

·

Atualizado

2023-02-02

CVSS v3.1

9.6

Crítica

VetorAV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Yi Home Camera 27US version 1.8.7.0D
Description An exploitable firmware downgrade vulnerability exists in the time syncing functionality. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this issue.
Recommendations For Yi Home Camera 27US version 1.8.7.0D, consider updating the firmware to a version that is not affected by this issue, as no specific fix is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2018-3892

Produtos afetados

Yi Home Camera