Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yitechnology'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-56897 9.8 Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, di 2025-03-03 20:15:43
CVE-2018-3891 2.1 An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trig 2023-02-02 02:17:00
CVE-2018-3898 5.1 An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer 2023-02-02 02:13:00
CVE-2018-3899 5.1 An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer 2023-02-02 02:12:00
CVE-2018-3892 6.8 An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network 2023-02-02 02:12:00
CVE-2018-3900 6.8 An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR 2023-02-02 02:08:00
CVE-2018-3910 5.4 An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to 2023-02-02 02:06:00
CVE-2018-3920 4.6 An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can 2023-02-02 02:04:00
CVE-2018-3928 5.0 An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of 2023-02-02 02:02:00
CVE-2018-3935 5.0 An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of p 2023-02-02 02:01:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/2
Zapisa po stranici: