CVE-2018-3947

An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.

Score

CVSS 3.0 9.0 Critical

Status

Modified - talos-cna@cisco.com

Published

2018-11-01

Last modified

2024-09-16

Weaknesses

CWE-200, CWE-319

Affected products

• Yi Technology (Yi)
• Yi Home (Yitechnology)
• Yi Home Camera Firmware (Yitechnology)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0616