29 matches found
CVE-2025-45466
CVE-2025-45466 CVE-2025-45466의 세부 정보입니다. CVE 공개: CVE-2025-45466 요약 Unitree Go1 로봇 개모든 버전 하드코딩된 비밀번호 사용 4. 루트 권한으로 원하는 모든 작업 수행 결과 아래 스크린샷과 같이, 루트 접근 비밀번호가 passwd.sh에 저장되어 있습니다그림 1. 이 파일은 동일한 패키지에서 확인할 수 있습니다그림 2 그림 1: 그림 2:...
CVE-2025-45467
CVE-2025-45467: Unitree Go1의 안전하지 않은 펌웨어 검증 요약 Unitree Go1 로봇 개모든 펌웨어 버전 ≤ Go120220511에서 심각한 취약점CVE-2025-45467이 발견되었습니다. 이 취약점은 펌웨어 업데이트 메커니즘 이 무결성 검증을 위해 안전하지 않은 MD5 해시 검사 만을 사용합니다. 이로 인해 공격자는 인증 검사를 우회하고 악성 펌웨어 를 업로드할 수 있으며, 이는 원격 코드 실행 , 권한 상승 , 정보 노출 로 이어집니다. 취약점 세부 정보 취약점 유형: 안전하지 않은 권한 영향: ...
EUVD-2025-22725
Malicious code in bioql PyPI...
EUVD-2025-22706
Malicious code in bioql PyPI...
Malicious code in @zalastax/nolb-go1 (npm)
The package @zalastax/nolb-go1 was found to contain malicious code...
MAL-2025-11610 Malicious code in @zalastax/nolb-go1 (npm)
The package @zalastax/nolb-go1 was found to contain malicious code...
CVE-2025-45467
Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...
CVE-2025-45466
Unitree Go1 = Go120220511 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext...
CVE-2025-45466
Unitree Go1 = Go120220511 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext...
CVE-2025-45467
Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...
CVE-2025-45467
Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...
CVE-2025-45467
The Unitree Go1 robotic dog (firmware versions ≤ Go1_2022_05_11 ) is vulnerable to Insecure Permissions due to a flawed firmware update mechanism. The system relies solely on MD5 checksums for integrity validation over Wi-Fi or Ethernet without employing digital signatures or authentication. An a...
CVE-2025-45466
Unitree Go1 = Go120220511 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext...
PT-2025-30848 · Unitree · Unitree Go 1
Name of the Vulnerable Software and Affected Versions: Unitree Go1 versions through Go1 2022 05 11 Description: The Unitree Go1 is susceptible to an incorrect access control issue. This is due to authentication credentials being hardcoded in plaintext. Recommendations: Unitree Go1 versions throug...
Unitree Go1 安全漏洞
Unitree Go1 is a bionic quadrupedal robot from the Chinese company Yu Shu Unitree. A security vulnerability exists in Unitree Go1 Go120220511 and prior versions, which stems from an insufficient MD5 checksum mechanism that could lead to a firmware integrity corruption...
Unitree Go1 安全漏洞
Unitree Go1 is a bionic quadrupedal robot from the Chinese company Yu Shu Unitree. A security vulnerability exists in Unitree Go1 Go120220511 and prior versions, which stems from hard-coded credentials and could lead to improper access control...
CVE-2025-45466: Use of Hard-coded Credentials
Unitree Go1 = Go120220511 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext...
CVE-2025-45467: Incorrect Default Permissions
Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...
CVE-2025-45466
The Unitree Go1 bionic robot (firmware versions ≤ Go1_2022_05_11 ) is vulnerable to Incorrect Access Control due to hardcoded plaintext authentication credentials within the firmware's /run.sh script. An attacker can extract these credentials to gain unauthorized root access via SSH or SCP over W...
