CVE-2018-3891: Buffer Overflow

Published Nov 2, 2018

Updated

An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability.

Affected Software

2 affected components

Yitechnology Yi Home Camera Firmware=1.8.7.0d

Yitechnology Yi Home Camera

Event History

Nov 2, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3891?

The severity of CVE-2018-3891 is considered high due to the potential for unauthorized firmware downgrades.

How do I fix CVE-2018-3891?

To mitigate CVE-2018-3891, ensure that the Yi Home Camera firmware is updated to the latest version provided by the vendor.

Who is affected by CVE-2018-3891?

CVE-2018-3891 affects users of the Yi Home Camera running firmware version 1.8.7.0D.

What type of attack can exploit CVE-2018-3891?

CVE-2018-3891 can be exploited through a firmware downgrade attack using a specially crafted file on an SD card.

What device is impacted by CVE-2018-3891?

The device impacted by CVE-2018-3891 is the Yi Home Camera, specifically the model with firmware version 1.8.7.0D.