Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks proper input validation, allowing attackers to execute arbitrary scripts present on the device by sending specially crafted TCP requests using directory traversal techniques.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yi IOT XY-3820 安全漏洞
Vulnerability Description
Yi IOT XY-3820是Yi IOT公司的一款无线安全摄像头。 Yi IOT XY-3820 v6.0.24.10版本存在安全漏洞，该漏洞源于守护进程在端口6789上暴露的TCP服务缺少输入验证，可能导致通过目录遍历执行设备上的任意脚本。
CVSS Information
N/A
Vulnerability Type
N/A