CVE-2018-9070

MEDIO 6.4CVE-2018-9070 · Published 13/07/2018 · updated 17/06/2026

In breve

CVE-2018-9070 è una vulnerabilità MEDIO (CVSS 6.4) che riguarda smart assistant (lenovo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 21.2% delle vulnerabilità.
Correzione: aggiornare a 12.1.82 o successiva.

Package	Affected versions	Patched versions
smart assistant lenovo	`< 12.1.82`	`12.1.82`

Description

For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides extra privileges, including changing settings and running code. Lenovo Smart Assistant is an Amazon Alexa-enabled smart speaker developed by Lenovo.

References

support.lenovo.com/us/en/solutions/LEN-22172 · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free