CVE-2020-10275

🗓️ 24 Jun 2020 05:00:26Reported by AliasType

Access tokens derived from default credentials for REST API lead to unauthorized access

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2020-10275	25 Jun 202007:55	–	circl
Cvelist	CVE-2020-10275 RVD#2565: Weak token generation for the REST API.	24 Jun 202005:00	–	cvelist
EUVD	EUVD-2020-2730	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10275	24 Jun 202005:15	–	nvd
Prion	Default credentials	24 Jun 202005:15	–	prion

NVD

Node

mobile-industrial-robots mir100_firmwareRange≤2.8.1.1

AND

mobile-industrial-robots mir100Match-

Node

mobile-industrial-robots mir200_firmwareMatch-

AND

mobile-industrial-robots mir200Match-

Node

mobile-industrial-robots mir250_firmwareMatch-

AND

mobile-industrial-robots mir250Match-

Node

mobile-industrial-robots mir500_firmwareMatch-

AND

mobile-industrial-robots mir500Match-

Node

mobile-industrial-robots mir1000_firmwareMatch-

AND

mobile-industrial-robots mir1000Match-

Node

easyrobotics er200_firmwareMatch-

AND

easyrobotics er200Match-

Node

easyrobotics er-lite_firmwareMatch-

AND

easyrobotics er-liteMatch-

Node

easyrobotics er-flex_firmwareMatch-

AND

easyrobotics er-flexMatch-

Node

easyrobotics er-one_firmwareMatch-

AND

easyrobotics er-oneMatch-

Node

uvd-robots uvd_firmwareMatch-

AND

uvd-robots uvdMatch-

[
  {
    "product": "MiR100",
    "vendor": "Mobile Industrial Robots A/S",
    "versions": [
      {
        "status": "affected",
        "version": "v2.8.1.1 and before"
      }
    ]
  }
]

Source	Link
github	www.github.com/aliasrobotics/RVD/issues/2565

21 Nov 2024 04:55Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

CVSS 39.8

EPSS0.0017