CVE-2020-10272

🗓️ 24 Jun 2020 04:35:12Reported by AliasType

MiR robots vulnerable to ROS default package exploit allowing seamless control

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2020-10272	25 Jun 202007:55	–	circl
Cvelist	CVE-2020-10272 RVD#2554: MiR ROS computational graph presents no authentication mechanisms	24 Jun 202004:35	–	cvelist
EUVD	EUVD-2020-2727	7 Oct 202500:30	–	euvd
ICS	Mobile Industrial Robots Vehicles and MiR Fleet Software	7 Oct 202100:00	–	ics
NVD	CVE-2020-10272	24 Jun 202005:15	–	nvd
Prion	Command injection	24 Jun 202005:15	–	prion

NVD

Node

aliasrobotics mir100_firmwareRange≤2.8.1.1

AND

aliasrobotics mir100Match-

Node

aliasrobotics mir200_firmwareRange≤2.8.1.1

AND

aliasrobotics mir200Match-

Node

aliasrobotics mir250_firmwareRange≤2.8.1.1

AND

aliasrobotics mir250Match-

Node

aliasrobotics mir500_firmwareRange≤2.8.1.1

AND

aliasrobotics mir500Match-

Node

aliasrobotics mir1000_firmwareRange≤2.8.1.1

AND

aliasrobotics mir1000Match-

Node

mobile-industrial-robotics er200_firmwareRange≤2.8.1.1

AND

mobile-industrial-robotics er200Match-

Node

enabled-robotics er-lite_firmwareRange≤2.8.1.1

AND

enabled-robotics er-liteMatch-

Node

enabled-robotics er-flex_firmwareRange≤2.8.1.1

AND

enabled-robotics er-flexMatch-

Node

enabled-robotics er-one_firmwareRange≤2.8.1.1

AND

enabled-robotics er-oneMatch-

Node

uvd-robots uvd_robots_firmwareRange≤2.8.1.1

AND

uvd-robots uvd_robotsMatch-

[
  {
    "product": "MiR100",
    "vendor": "Mobile Industrial Robots A/S",
    "versions": [
      {
        "status": "affected",
        "version": "v2.8.1.1 and before"
      }
    ]
  }
]

Source	Link
github	www.github.com/aliasrobotics/RVD/issues/2554

21 Nov 2024 04:55Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

CVSS 210

CVSS 310

EPSS0.00473

CWE-306