Yeelight

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yeelight records in CISA KEV

No Yeelight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smart Ai Speaker Firmware 1 record LOW Smart Lamp Firmware 1 record MEDIUM Yeelight Classic 1 record MEDIUM

Records

1 record in Smart Ai Speaker Firmware · all components

TI-2018-14186 CVE-2018-20007 · GHSA-3pw5-pqx4-4928

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART…

LOW 31

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00487 Published 2019-05-16 No fix listed CWE-732

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0