CVE-2018-20007
PoC —CVSS 3.0
6.8 medium
EPSS
<1%p40
Published
()
Modified
Description
Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information.
- Vendors
- yeelight
- Products
- smart ai speaker firmware
- Weakness
- CWE-732
- Vector
- CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.