CVE-2020-8994
MEDIUMXIAOMI AI Speaker MDZ-25-DT Firmware 1.34.36 and 1.40.14 - Unauthenticated Root Shell Access via UART Interface
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-8994. PoCs published by Jian-Xian.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2020-8994, a physical access vulnerability in XIAOMI AI speaker MDZ-25-DT. It demonstrates how attackers can gain root access via UART interface without authentication, leading to various impacts such as reading Wi-Fi credentials, eavesdropping, and system manipulation.
Description
An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialogue text files between users and XIAOMI AI speaker, use Text-To-Speech tools pretend XIAOMI speakers' voice achieve social engineering attacks, eavesdrop on users and record what XIAOMI AI speaker hears, delete the entire XIAOMI AI speaker system, modify system files, stop voice assistant service, start the XIAOMI AI speaker’s SSH service as a backdoor
Exploits (1)
This repository provides a detailed technical analysis of CVE-2020-8994, a physical access vulnerability in XIAOMI AI speaker MDZ-25-DT. It demonstrates how attackers can gain root access via UART interface without authentication, leading to various impacts such as reading Wi-Fi credentials, eavesdropping, and system manipulation.
References (3)
Scores
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H