VULNERABILITY INTELLIGENCE

CVE-2018-20007

CVSS score7.2 HIGH

EPSS probability0.49%

CISA KEVNot currently listed

Published2019-05-16

Last modified2026-06-17

Description

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user informati... .