Vulnerability Description
Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Robotemi | Temi | >= 1.3.3, <= 1.3.7931 |
Related Weaknesses (CWE)
References
- https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-ExploitThird Party Advisory
- https://www.robotemi.com/software-updates/Vendor Advisory
- https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-ExploitThird Party Advisory
- https://www.robotemi.com/software-updates/Vendor Advisory
FAQ
What is CVE-2020-16170?
CVE-2020-16170 is a vulnerability with a CVSS score of 7.5 (HIGH). Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can b...
How severe is CVE-2020-16170?
CVE-2020-16170 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-16170?
Check the references section above for vendor advisories and patch information. Affected products include: Robotemi Temi.