CVE-2018-3928

Name of the Vulnerable Software and Affected Versions Yi Home Camera version 1.8.7.0D

Description An exploitable code execution issue exists in the firmware update functionality. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this issue.

Recommendations For Yi Home Camera version 1.8.7.0D, as a temporary workaround, consider restricting access to the firmware update functionality until a patch is available. Avoid using the vulnerable firmware update feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.