Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mp64-rm5r-c35p

Опубликовано: 20 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 8.1

Описание

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function of the file home/web/ipc of the component HTTP Firmware Update Handler. The manipulation leads to improper verification of cryptographic signature. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function of the file home/web/ipc of the component HTTP Firmware Update Handler. The manipulation leads to improper verification of cryptographic signature. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 1%
0.00011
Низкий

8.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 8.1
nvd
21 день назад

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function of the file home/web/ipc of the component HTTP Firmware Update Handler. The manipulation leads to improper verification of cryptographic signature. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 1%
0.00011
Низкий

8.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-345