CVE-2018-3935: High severity yitechnology yi home camera firmware vulnerability

Published Nov 2, 2018

Updated

An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.

Affected Software

3 affected components

Yitechnology Yi Home Camera Firmware=1.8.7.0d

Yitechnology Yi Home Camera

Yitechnology Yi Home

Event History

Nov 2, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3935?

CVE-2018-3935 is classified as a critical severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2018-3935?

To fix CVE-2018-3935, update the Yi Home Camera firmware to a version that addresses this vulnerability.

What type of vulnerability is CVE-2018-3935?

CVE-2018-3935 is a code execution vulnerability in the UDP network functionality of the Yi Home Camera.

What can an attacker do with CVE-2018-3935?

An attacker can send specially crafted UDP packets to exploit CVE-2018-3935, leading to denial of service.

Which device is affected by CVE-2018-3935?

CVE-2018-3935 affects the Yi Home Camera running firmware version 1.8.7.0D.