CVE-2020-8994 Auth bypass in n/a
Attackers with physical access can bypass authentication via UART to gain root privileges, enabling data theft, eavesdropping, and system compromise on Xiaomi AI speakers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-8994?
CVE-2020-8994 is a medium-severity authentication bypass vulnerability in n/a, published on 5 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialogue text files between users and XIAOMI AI speaker, use Text-To-Speech tools pretend XIAOMI speakers' voice achieve social engineering attacks, eavesdrop on users and record what XIAOMI AI speaker hears, delete the entire XIAOMI AI speaker system, modify system files, stop voice assistant service, start the XIAOMI AI speaker’s SSH service as a backdoor
Weakness: CWE-287
Which versions are affected by CVE-2020-8994?
It affects 1 product.
Products include Mi Mdz-25-Dt Firmware.
How do I fix CVE-2020-8994?
No fix has been published for CVE-2020-8994 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-8994 being exploited?
There is no known exploitation of CVE-2020-8994 in the wild and no public exploit code.
Sources
Also known as GHSA-w763-qv46-5p55.