Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-10273
HistoryJun 24, 2020 - 5:15 a.m.

CVE-2020-10273

2020-06-2405:15:13
CWE-311
CWE-312
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

54.0%

JSON

MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots. This flaw allows attackers with access to the robot or the robot network (while in combination with other flaws) to retrieve and easily exfiltrate all installed intellectual property and data.

Affected configurations

NVD
Node
aliasroboticsmir100_firmwareRange≤2.8.1.1
AND
aliasroboticsmir100Match-
Node
aliasroboticsmir200_firmwareRange≤2.8.1.1
AND
aliasroboticsmir200Match-
Node
aliasroboticsmir250_firmwareRange≤2.8.1.1
AND
aliasroboticsmir250Match-
Node
aliasroboticsmir500_firmwareRange≤2.8.1.1
AND
aliasroboticsmir500Match-
Node
aliasroboticsmir1000_firmwareRange≤2.8.1.1
AND
aliasroboticsmir1000Match-
Node
mobile-industrial-roboticser200_firmwareRange≤2.8.1.1
AND
mobile-industrial-roboticser200Match-
Node
enabled-roboticser-lite_firmwareRange≤2.8.1.1
AND
enabled-roboticser-liteMatch-
Node
enabled-roboticser-flex_firmwareRange≤2.8.1.1
AND
enabled-roboticser-flexMatch-
Node
enabled-roboticser-one_firmwareRange≤2.8.1.1
AND
enabled-roboticser-oneMatch-
Node
uvd-robotsuvd_robots_firmwareRange≤2.8.1.1
AND
uvd-robotsuvd_robotsMatch-

Related

cvelist 2
cve 2
prion 2
nvd 1
ics 1
cvelist
cvelist
CVE-2020-10273 RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers
2020-06-24 00:00:00
CVE-2020-10274 RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)
2020-06-24 00:00:00
cve
cve
CVE-2020-10273
2020-06-24 05:15:13
CVE-2020-10274
2020-06-24 05:15:13
prion
prion
Design/Logic Flaw
2020-06-24 05:15:00
Default credentials
2020-06-24 05:15:00
nvd
nvd
CVE-2020-10274
2020-06-24 05:15:13
ics
ics
Mobile Industrial Robots Vehicles and MiR Fleet Software
2021-10-07 12:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

54.0%

JSON
Related for NVD:CVE-2020-10273
cvelist2cve2prion2nvd1ics1