CVE-2019-13953

An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication.

• https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494Third Party Advisory
• https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494Third Party Advisory

Published

Sep 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13948SyGuestBook A5 Version 1.2 allows stored XSS because the isV…
• CVE-2019-13949SyGuestBook A5 Version 1.2 has no CSRF protection mechanism,…
• CVE-2019-1395An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2019-13950index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has …
• CVE-2019-13951The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x bef…
• CVE-2019-13952The set_ipv6() function in zscan_rfc1035.rl in gdnsd before …9.8
• CVE-2019-13954Mikrotik RouterOS before 6.44.5 (long-term release tree) is …
• CVE-2019-13955Mikrotik RouterOS before 6.44.5 (long-term release tree) is …
• CVE-2019-13956Discuz!ML 3.2 through 3.4 allows remote attackers to execute…
• CVE-2019-13957In Umbraco 7.3.8, there is SQL Injection in the backoffice/P…9.8
• CVE-2019-13959In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not ha…
• CVE-2019-1396An elevation of privilege vulnerability exists in Windows wh…7.8