97 matches found
CVE-2025-8748 OS command injection in MiR robots and MiR fleet via crafted HTTP requests
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system...
CVE-2025-8748: Improper Neutralization of Special Elements used in an OS Command
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system...
PT-2025-32353
Name of the Vulnerable Software and Affected Versions MiR software versions prior to 3.0.0 Description MiR software versions prior to 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands ...
CVE-2025-8749: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots MiR Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request...
The vulnerability of the software products of the LLC “NPO ‘MIR’ lies in the insufficient limitation on the number of authentication attempts, allowing a perpetrator to carry out an attack using brute-force methods.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the insufficient limitation on the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to the use of weak protection for database data, allows attackers to disclose the protected information.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the use of weak protection for database credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose the protected information...
The vulnerability of the HTTP protocol implementation in the software products of the LLC “NPO “MIR” lies in the transmission of data in an open manner, which allows attackers to disclose protected information.
The vulnerability of the HTTP protocol implementation in software products of the LLC “NPO ‘MIR’” lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to the use of cryptographic algorithms containing defects, allows attackers to execute an attack using brute-force methods.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute an attack using brute-force methods...
The vulnerability of the OPC Server implementation in MIR and SCADA systems, related to the transmission of data in an open manner, allows attackers to disclose protected information.
The vulnerability of the OPC Server implementation and the MIIR SCADA system is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the MIR CT-51 controller, related to the disclosure of information during data transmission, allows a intruder to enhance their privileges.
The vulnerability of the MIR KT-51 controller is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to incorrect authorization, allows a perpetrator to increase their privileges.
The vulnerability of the software products developed by OOO “NPO “MIR” is related to incorrect authorization. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the FTP protocol implementation of the MIR KT-51 controller and the MIR controller configuration tool, related to the transmission of data in an open manner, allows a perpetrator to disclose protected information.
The vulnerability of the FTP protocol implementation in the MIR KT-51 software controller and the MIR controller configuration tool lies in the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to disclose the protected information...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to weak password requirements, allows attackers to execute a brute-force attack.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ is related to weak password requirements. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...
rust-toolset:rhel8 bug fix and enhancement update
An update is available for rust, module.rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc,...
PT-2024-41070 · Мир Кт-51 +1 · Мир Кт-51 +1
Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР конфигуратора контроллеров affected versions not specified Description: The issue is related to the implementation of the FTP protocol, which transmits data in an open form. This could allow a remote attacker to disclose...
PT-2024-41075 · Ооо 'Нпо Мир' · Конфигуратор Контроллеров Мир +2
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the storage of unencrypted account credentials. Exploitation of this issue could allow an attacker to disclose protected information. Recommendations: At the moment,...
PT-2024-41068 · Мир Кт-51 +1 · Мир Кт-51 +1
Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР контроллеры affected versions not specified Description: The issue is related to the implementation of the Telnet protocol in the МИР КТ-51 controller and the МИР controller configurator, which involves the transmission of...
mir-knigi.org Cross Site Scripting vulnerability OBB-2968707
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mobile Industrial Robots Vehicles and MiR Fleet Software
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Mobile Industrial Robots MiR Equipment: MiR100, MiR200, MiR250, MiR500, MiR1000, MiR Fleet Vulnerabilities: Improper Access Control, Integer Overflow or Wraparound, Exposur...
mir-mosaic.com Cross Site Scripting vulnerability OBB-1489319
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...