CVSS 3.0
8.8 highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-13953
High (8.8) in xiaoyi yi m1 mirrorless camera firmware. EPSS 1.0% chance of exploitation in the next 30 days.
An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- xiaoyi:yi_m1_mirrorless_camera_firmware