CVE-2018-20007: High severity yeelight smart ai speaker firmware vulnerability
Yeelight Smart AI Speaker 3.3.100074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Yeelight Smart AI Speaker?
The vulnerability ID for Yeelight Smart AI Speaker is CVE-2018-20007.
What is the severity of CVE-2018-20007?
The severity of CVE-2018-20007 is high with a CVSS score of 6.8.
How can an attacker exploit CVE-2018-20007?
An attacker can exploit CVE-2018-20007 by gaining physical access to the device and obtaining a root shell through the UART interface.
What can an attacker do once they exploit CVE-2018-20007?
Once an attacker exploits CVE-2018-20007, they can exfiltrate audio data, retrieve cleartext Wi-Fi credentials, and access sensitive device and user information.
Is the Yeelight Smart AI Speaker firmware version 3.3.10_0074 vulnerable?
Yes, the Yeelight Smart AI Speaker firmware version 3.3.10_0074 is vulnerable to CVE-2018-20007.