Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities

guest · Nov 1, 2018

Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
November 1, 2018
https://threatpost.com/yi-iot-home-camera-riddled-with-code-execution-vulnerabilities/138741/

Multiple vulnerabilities in the firmware used by the Yi Technology Home Camera version 27US have been found, which could allow remote code-execution on the connected devices.

First uncovered by Cisco Talos and disclosed Wednesday, five flaws in the firmware open the door to command injection, network authentication bypass and the ability to disable the device.

Five other vulnerabilities were also uncovered, although they require physical access for successful exploitation. This “makes them less of a concern if the camera is stored safely inside of the venue that they are protecting,” according to Talos.

Fixes for all 10 flaws are available in the latest version of the camera’s firmware.
Click to expand...

Log in or Sign up

Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities

guest Guest

Log in or Sign up

Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities

guest Guest

Useful Searches