PT-2020-14791 · Temi · Temi Robox Os+1

Published 2020-08-11 · Updated 2023-05-15 · CVE-2020-16170

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931

Description The issue allows remote attackers to listen in on ongoing calls between temi robots and their users if they can brute-force or guess a six-digit value. This is due to the use of hard-coded credentials in the affected software.

Recommendations For temi Robox OS versions prior to 120, update to version 120 or later. For temi Android app versions up to 1.3.7931, update to a version later than 1.3.7931.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-16170

Affected Products

Temi Android App

Temi Robox Os

References · 4

• 🔥 https://mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed · Exploit
• https://osv.dev/vulnerability/CVE-2020-16170 · Vendor Advisory
• https://robotemi.com/software-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16170 · Security Note