CVE-2018-3892: Buffer Overflow
An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3892?
CVE-2018-3892 is rated as high severity due to the potential for code execution through a buffer overflow.
How do I fix CVE-2018-3892?
To mitigate CVE-2018-3892, update the Yi Home Camera firmware to a version that is not vulnerable to the downgrade exploit.
What kind of attack could exploit CVE-2018-3892?
An attacker could exploit CVE-2018-3892 by intercepting and altering network traffic to send a specially crafted packet to the device.
What devices are affected by CVE-2018-3892?
CVE-2018-3892 specifically affects the Yi Home Camera firmware version 1.8.7.0D.
Is CVE-2018-3892 a remote vulnerability?
Yes, CVE-2018-3892 is a remote vulnerability that can be exploited over the network.