CVE-2020-10279

🗓️ 24 Jun 2020 06:05:23Reported by AliasType

MiR robot controllers (central computation unit) running Ubuntu 16.04.2 are vulnerable to access escalation, race conditions, insecure configurations, and DoS attacks

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2020-10279	25 Jun 202007:55	–	circl
Cvelist	CVE-2020-10279 RVD#2569: Insecure operating system defaults in MiR robots	24 Jun 202006:05	–	cvelist
EUVD	EUVD-2020-2734	7 Oct 202500:30	–	euvd
ICS	Mobile Industrial Robots Vehicles and MiR Fleet Software	7 Oct 202100:00	–	ics
NVD	CVE-2020-10279	24 Jun 202006:15	–	nvd
OSV	CVE-2020-10279	24 Jun 202006:15	–	osv
Prion	Race condition	24 Jun 202006:15	–	prion

NVD

Node

aliasrobotics mir100_firmwareRange≤2.8.1.1

AND

aliasrobotics mir100Match-

Node

aliasrobotics mir200_firmwareRange≤2.8.1.1

AND

aliasrobotics mir200Match-

Node

aliasrobotics mir250_firmwareRange≤2.8.1.1

AND

aliasrobotics mir250Match-

Node

aliasrobotics mir500_firmwareRange≤2.8.1.1

AND

aliasrobotics mir500Match-

Node

aliasrobotics mir1000_firmwareRange≤2.8.1.1

AND

aliasrobotics mir1000Match-

Node

mobile-industrial-robotics er200_firmwareRange≤2.8.1.1

AND

mobile-industrial-robotics er200Match-

Node

enabled-robotics er-lite_firmwareRange≤2.8.1.1

AND

enabled-robotics er-liteMatch-

Node

enabled-robotics er-flex_firmwareRange≤2.8.1.1

AND

enabled-robotics er-flexMatch-

Node

enabled-robotics er-one_firmwareRange≤2.8.1.1

AND

enabled-robotics er-oneMatch-

Node

uvd-robots uvd_robots_firmwareRange≤2.8.1.1

AND

uvd-robots uvd_robotsMatch-

[
  {
    "product": "MiR100",
    "vendor": "Mobile Industrial Robots A/S",
    "versions": [
      {
        "status": "affected",
        "version": "v2.8.1.1 and before"
      }
    ]
  }
]

Source	Link
github	www.github.com/aliasrobotics/RVD/issues/2569

21 Nov 2024 04:55Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

CVSS 310

EPSS0.00287

cve-2020-10279 mir robot controllers ubuntu 16.04.2 access escalation race conditions insecure configurations dos attacks