7.5

CVE-2020-10280

RVD#2568: Apache server is vulnerable to a DoS

The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mobile-industrial-robots ≫ Mir100 Firmware Version <= 2.8.1.1
   Mobile-industrial-robots ≫ Mir100 Version -
Easyrobotics ≫ Er200 Firmware Version -
   Easyrobotics ≫ Er200 Version -
Easyrobotics ≫ Er-lite Firmware Version -
   Easyrobotics ≫ Er-lite Version -
Easyrobotics ≫ Er-flex Firmware Version -
   Easyrobotics ≫ Er-flex Version -
Easyrobotics ≫ Er-one Firmware Version -
   Easyrobotics ≫ Er-one Version -
Uvd-robots ≫ Uvd Firmware Version -
   Uvd-robots ≫ Uvd Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.18% 0.636
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
cve@aliasrobotics.com 8.2 3.9 4.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE-239 Failure to Handle Incomplete Element

The product does not properly handle when a particular element is not completely specified.

CWE-404 Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

https://github.com/aliasrobotics/RVD/issues/2568
Third Party Advisory