CVE-2020-10279

CRITICAL

9.8

Description

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published6/24/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

aliasrobotics:mir100aliasrobotics:mir1000aliasrobotics:mir1000_firmwarealiasrobotics:mir100_firmwarealiasrobotics:mir200aliasrobotics:mir200_firmwarealiasrobotics:mir250aliasrobotics:mir250_firmwarealiasrobotics:mir500aliasrobotics:mir500_firmwareenabled-robotics:er-flexenabled-robotics:er-flex_firmwareenabled-robotics:er-liteenabled-robotics:er-lite_firmwareenabled-robotics:er-oneenabled-robotics:er-one_firmwaremobile-industrial-robotics:er200mobile-industrial-robotics:er200_firmwareuvd-robots:uvd_robotsuvd-robots:uvd_robots_firmware

Weaknesses (CWE)

CWE-276CWE-362CWE-1188

References

https://github.com/aliasrobotics/RVD/issues/2569(cve@aliasrobotics.com)

https://github.com/aliasrobotics/RVD/issues/2569(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.