8.2

CVE-2020-10280

The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.

Data is provided by the National Vulnerability Database (NVD)
Mobile-industrial-robots ≫ Mir100 Firmware Version <= 2.8.1.1
   Mobile-industrial-robots ≫ Mir100 Version-
Easyrobotics ≫ Er200 Firmware Version-
   Easyrobotics ≫ Er200 Version-
Easyrobotics ≫ Er-lite Firmware Version-
   Easyrobotics ≫ Er-lite Version-
Easyrobotics ≫ Er-flex Firmware Version-
   Easyrobotics ≫ Er-flex Version-
Easyrobotics ≫ Er-one Firmware Version-
   Easyrobotics ≫ Er-one Version-
Uvd-robots ≫ Uvd Firmware Version-
   Uvd-robots ≫ Uvd Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.33% 0.556
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
cve@aliasrobotics.com 8.2 3.9 4.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE-239 Failure to Handle Incomplete Element

The product does not properly handle when a particular element is not completely specified.

CWE-404 Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.