PT-2018-18831 · Lenovo · Lenovo Smart Assistant

Publicado 2018-07-13 · Atualizado 2019-10-03 · CVE-2018-9070

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Smart Assistant Android app versions prior to 12.1.82

Description An issue exists where an attacker with physical access to the smart speaker can enter factory test mode by pressing a specific button sequence. This mode provides extra privileges, including changing settings and running code.

Recommendations For versions prior to 12.1.82, update to version 12.1.82 or later to resolve the issue. As a temporary workaround, consider restricting physical access to the smart speaker to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2018-9070

Produtos afetados

Lenovo Smart Assistant

Referências · 3

• https://support.lenovo.com/us/en/solutions/LEN-22172 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-9070 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-9070 · Nota de Segurança