PT-2020-12012 · Xiaomi · Xiaomi Xiaoai Speaker Pro Lx06

Guan-Wei Hou + 3 · Published 2020-04-08 · Updated 2021-07-21 · CVE-2020-10263

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XIAOMI XIAOAI speaker Pro LX06 version 1.52.4

Description An issue was discovered that allows attackers to gain root shell access by accessing the UART interface. This access enables various malicious activities, including:

• reading Wi-Fi SSID or password,
• reading dialogue text files between users and the device,
• using Text-To-Speech tools to pretend to be the device's voice for social engineering attacks,
• eavesdropping on users and recording what the device hears,
• modifying system files,
• sending any IR code through the IR emitter,
• stopping the voice assistant service,
• enabling the device's SSH or TELNET service as a backdoor,
• tampering with the router configuration in local area networks.

Recommendations For XIAOMI XIAOAI speaker Pro LX06 version 1.52.4, as a temporary workaround, consider restricting physical access to the UART interface until a patch is available. Additionally, restrict access to the device's network to minimize the risk of exploitation. Avoid using the device's Text-To-Speech functionality and IR emitter until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-10263

Affected Products

Xiaomi Xiaoai Speaker Pro Lx06

References · 6

• 🔥 https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2020-10263.md · Exploit
• 🔥 https://youtube.com/watch?v=Cr5DupGxmL4 · Exploit
• https://osv.dev/vulnerability/CVE-2020-10263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10263 · Security Note
• https://sec.xiaomi.com · Vendor Advisory
• https://t.me/cvenotify/2575 · Telegram Post