9.1
CVE-2020-16167
- EPSS 0.49%
- Veröffentlicht 07.08.2020 20:15:12
- Zuletzt bearbeitet 21.11.2024 05:06:53
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMissing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to receive and answer calls intended for another temi user. Answering the call this way grants motor control of the temi in addition to audio/video via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Robotemi ≫ Launcher Os Version >= 11969 <= 13146
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.629 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.