CVE-2020-10279

CRITICAL

9.8

Descricao

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado6/24/2020

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

aliasrobotics:mir100aliasrobotics:mir1000aliasrobotics:mir1000_firmwarealiasrobotics:mir100_firmwarealiasrobotics:mir200aliasrobotics:mir200_firmwarealiasrobotics:mir250aliasrobotics:mir250_firmwarealiasrobotics:mir500aliasrobotics:mir500_firmwareenabled-robotics:er-flexenabled-robotics:er-flex_firmwareenabled-robotics:er-liteenabled-robotics:er-lite_firmwareenabled-robotics:er-oneenabled-robotics:er-one_firmwaremobile-industrial-robotics:er200mobile-industrial-robotics:er200_firmwareuvd-robots:uvd_robotsuvd-robots:uvd_robots_firmware

Fraquezas (CWE)

CWE-276CWE-362CWE-1188

Referencias

https://github.com/aliasrobotics/RVD/issues/2569(cve@aliasrobotics.com)

https://github.com/aliasrobotics/RVD/issues/2569(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.