CVE-2018-20007 Missing authorization in n/a
Physical attackers can access the UART interface to gain root privileges and exfiltrate sensitive data from Yeelight Smart AI Speakers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-20007?
CVE-2018-20007 is a medium-severity missing authorization vulnerability in n/a, published on 16 May 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information.
Weakness: CWE-732
Which versions are affected by CVE-2018-20007?
It affects 1 product.
Products include Yeelight Smart Ai Speaker Firmware.
How do I fix CVE-2018-20007?
No fix has been published for CVE-2018-20007 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2018-20007 being exploited?
There is no known exploitation of CVE-2018-20007 in the wild and no public exploit code.
Sources
Also known as GHSA-3pw5-pqx4-4928.