7.5
CVE-2020-10273
- EPSS 0.12%
- Published 24.06.2020 05:15:13
- Last modified 21.11.2024 04:55:06
- Source cve@aliasrobotics.com
- Teams watchlist Login
- Open Login
MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots. This flaw allows attackers with access to the robot or the robot network (while in combination with other flaws) to retrieve and easily exfiltrate all installed intellectual property and data.
Data is provided by the National Vulnerability Database (NVD)
Aliasrobotics ≫ Mir100 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir200 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir250 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir500 Firmware Version <= 2.8.1.1
Aliasrobotics ≫ Mir1000 Firmware Version <= 2.8.1.1
Mobile-industrial-robotics ≫ Er200 Firmware Version <= 2.8.1.1
Enabled-robotics ≫ Er-lite Firmware Version <= 2.8.1.1
Enabled-robotics ≫ Er-flex Firmware Version <= 2.8.1.1
Enabled-robotics ≫ Er-one Firmware Version <= 2.8.1.1
Uvd-robots ≫ Uvd Robots Firmware Version <= 2.8.1.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.283 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| cve@aliasrobotics.com | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-311 Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
CWE-312 Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.