Paper/Archive/CVE-2020-16167

CVE-2020-16167

mitre — Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to re…

EPSS 2%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 82.1.821 × 2016.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to receive and answer calls intended for another temi user. Answering the call this way grants motor control of the temi in addition to audio/video via unspecified vectors.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refrobotemi.com/software-updates refmcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed