7.5
CVE-2020-10273
- EPSS 0.86%
- Veröffentlicht 24.06.2020 05:15:13
- Zuletzt bearbeitet 21.11.2024 04:55:06
- Erkennungen
LoginRVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers
MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots. This flaw allows attackers with access to the robot or the robot network (while in combination with other flaws) to retrieve and easily exfiltrate all installed intellectual property and data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aliasrobotics ≫ Mir100 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir200 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir250 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir500 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir1000 Firmware Version <= 2.8.1.1
Mobile-industrial-robotics ≫ Er200 Firmware Version <= 2.8.1.1
Enabled-robotics ≫ Er-lite Firmware Version <= 2.8.1.1
Enabled-robotics ≫ Er-flex Firmware Version <= 2.8.1.1
Enabled-robotics ≫ Er-one Firmware Version <= 2.8.1.1
Uvd-robots ≫ Uvd Robots Firmware Version <= 2.8.1.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.86% | 0.536 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| cve@aliasrobotics.com | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-311 Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
CWE-312 Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
https://github.com/aliasrobotics/RVD/issues/2560