The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.
References
| Link | Resource |
|---|---|
| https://github.com/actuator/yi/blob/main/CWE-319.md | Exploit Third Party Advisory |
| https://play.google.com/store/apps/details?id=com.yunyi.smartcamera | Product |
| https://github.com/actuator/yi/blob/main/CWE-319.md | Exploit Third Party Advisory |
| https://play.google.com/store/apps/details?id=com.yunyi.smartcamera | Product |
Configurations
History
21 Nov 2024, 08:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/actuator/yi/blob/main/CWE-319.md - Exploit, Third Party Advisory | |
| References | () https://play.google.com/store/apps/details?id=com.yunyi.smartcamera - Product |
09 Jan 2024, 20:06
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other | |
| CPE | cpe:2.3:a:kamivision:yi_iot:*:*:*:*:*:android:*:* | |
| References | () https://play.google.com/store/apps/details?id=com.yunyi.smartcamera - Product | |
| References | () https://github.com/actuator/yi/blob/main/CWE-319.md - Exploit, Third Party Advisory | |
| First Time |
Kamivision yi Iot
Kamivision |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
27 Dec 2023, 21:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-27 21:15
Updated : 2024-11-21 08:30
NVD link : CVE-2023-47882
Mitre link : CVE-2023-47882
CVE.ORG link : CVE-2023-47882
JSON object : View
Products Affected
kamivision
- yi_iot
CWE