PT-2020-14790 · Temi · Temi Robox Os+1

Mark Bereza · Published 2020-08-07 · Updated 2020-09-02 · CVE-2020-16169

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions temi Robox OS versions prior to 1.2.0 temi Android app versions up to 1.3.7931

Description The issue allows remote attackers to bypass authentication and gain elevated privileges, enabling them to automatically answer calls and gain control over audio, video, and motor functions via unspecified vectors.

Recommendations For temi Robox OS versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. For temi Android app versions up to 1.3.7931, update to a version later than 1.3.7931 to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-16169

Affected Products

Temi Android App

Temi Robox Os

References · 4

• 🔥 https://mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-16169 · Security Note
• https://robotemi.com/software-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-16169 · Vendor Advisory