Логотип exploitDog
bind:CVE-2018-3920
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-3920

Количество 2

Количество 2

nvd логотип

CVE-2018-3920

больше 7 лет назад

An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.

CVSS3: 6.8
EPSS: Низкий
github логотип

GHSA-r65w-5jgv-h7gj

больше 3 лет назад

An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.

CVSS3: 6.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2018-3920

An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.

CVSS3: 6.8
0%
Низкий
больше 7 лет назад
github логотип
GHSA-r65w-5jgv-h7gj

An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.

CVSS3: 6.8
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу