An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Yi_home_camera_firmware | Yitechnology | 1.8.7.0d (including) | 1.8.7.0d (including) |