Mi Xiaomi Xiaoai Speaker Pro LX06 Firmware vulnerabilities

2 CVEs affecting Mi Xiaomi Xiaoai Speaker Pro LX06 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-10263, published 2020-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-10262, published 2020-04-08. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the boot process, and use the mi_console command cascaded by the SN code shown on…
CVE-2020-10263, published 2020-04-08. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can (i) read Wi-Fi SSID or password, (ii) read the…