PT-2020-14789 · Temi · Temi Robox Os+1

Mark Bereza · Published 2020-08-07 · Updated 2023-05-16 · CVE-2020-16168

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931

Description The issue allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests.

Recommendations For temi Robox OS versions prior to 120, update to version 120 or later. For temi Android app versions up to 1.3.7931, update to a version later than 1.3.7931.

Exploit

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2020-16168

Affected Products

Temi Android App

Temi Robox Os

References · 4

• 🔥 https://mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-16168 · Security Note
• https://robotemi.com/software-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-16168 · Vendor Advisory