{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-28T00:21:51.886","vulnerabilities":[{"cve":{"id":"CVE-2019-13953","sourceIdentifier":"cve@mitre.org","published":"2019-09-06T16:15:10.987","lastModified":"2026-06-17T02:17:30.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication."},{"lang":"es","value":"Existe una vulnerabilidad de omisión de autenticación explotable en el módulo de autenticación Bluetooth Low Energy (BLE) de YI M1 Mirrorless Camera versión V3.2-cn. Un atacante puede enviar un conjunto de comandos de BLE para activar esta vulnerabilidad, resultando en una fuga de datos confidenciales (por ejemplo, fotos personales). Un atacante también puede controlar la cámara para grabar o tomar una foto después de omitir la autenticación."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:C/I:C/A:C","baseScore":8.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":6.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xiaoyi:yi_m1_mirrorless_camera_firmware:3.2-cn:*:*:*:*:*:*:*","matchCriteriaId":"0AE87E47-2C6D-4ED8-B224-FB9A39DEDD16"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:xiaoyi:yi_m1_mirrorless_camera:-:*:*:*:*:*:*:*","matchCriteriaId":"8F93AC29-B169-4335-AD1E-84F80F8FE639"}]}]}],"references":[{"url":"https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}