Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3pw5-pqx4-4928

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information.

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information.

EPSS

Процентиль: 13%
0.00042
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.8
nvd
больше 6 лет назад

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information.

EPSS

Процентиль: 13%
0.00042
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-732