CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

Design/Logic Flaw

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

The CVE affects Vecna VGo Robot—versions 3.0.3.52164 and 3.0.3.53662 (earlier versions may also be affected). The flaw enables an attacker on an adjacent network to capture firmware updates, exposing sensitive information and potentially enabling further compromise. The NVD/ICSA data record a CVS...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

Command injection

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

Vecna VGo Robot is affected by CVE-2018-8866 (OS Command Injection). Affected versions: 3.0.3.52164 and 3.0.3.53662; prior versions may be affected. Vulnerability arises from improper neutralization of special elements used in OS commands (CWE-78). Exploitation vector is adjacent network; impact ...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

Friday Squid Blogging: US Army Developing 3D-Printable Battlefield Robot Squid

The next major war will be super weird. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Vecna VGo Robot OS Command Injection Vulnerability

VGo is a new productivity improvement solution that allows individuals to replicate themselves in distant locations and move around freely as if they were there. An OS command injection vulnerability exists in versions prior to Vecna VGo Robot 3.0.3.52164, which can be exploited by an attacker to...

Vecna VGo Robot Information Disclosure Vulnerability

VGo is a new productivity improvement solution that allows individuals to replicate themselves in distant locations and move around freely as if they were there. An information disclosure vulnerability exists in versions prior to Vecna VGo Robot 3.0.3.52164, which can be exploited by an attacker ...

CVE-2017-17428

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-17428

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

Code injection

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-17428

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-17428

CVE-2017-17428 is a Bleichenbacher-style RSA padding oracle (ROBOT) vulnerability that can allow an attacker to decrypt TLS data by exploiting RSA PKCS#1. Cisco advisories and CERT CERT/SEC records indicate multiple Cisco products (and other vendors’ TLS stacks) were affected and issued updates. ...