CVE-2020-16170

HIGH

temi Android app <= 1.3.7931 - Unauthenticated Call Eavesdropping via Hard-coded Credentials

Title source: llm
STIX 2.1

Description

Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.robotemi.com/software-updates/

Scores

CVSS v3 7.5
EPSS 0.0187
EPSS Percentile 76.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-798
Status published
Products (1)
robotemi/temi 1.3.3 - 1.3.7931
Published Aug 11, 2020
Tracked Since Feb 18, 2026