CVE-2018-17933

CVE-2018-17933 affects Vecna VGo Robot versions 3.0.3.52164 and 3.0.3.53662 (and earlier). The root issue is improper authorization, allowing user accounts to execute commands outside their privileges, potentially within admin scope, when connected via VGo XAMPP. The IV (under Update A) notes an ...

CVE-2018-8866

Vecna VGo Robot is affected by CVE-2018-8866 (OS Command Injection). Affected versions: 3.0.3.52164 and 3.0.3.53662; prior versions may be affected. Vulnerability arises from improper neutralization of special elements used in OS commands (CWE-78). Exploitation vector is adjacent network; impact ...

CVE-2018-8860

The CVE affects Vecna VGo Robot—versions 3.0.3.52164 and 3.0.3.53662 (earlier versions may also be affected). The flaw enables an attacker on an adjacent network to capture firmware updates, exposing sensitive information and potentially enabling further compromise. The NVD/ICSA data record a CVS...

CVE-2018-17931

The CVE-2018-17931 entry affects Vecna’s VGo Robot (versions 3.0.3.52164 and 3.0.3.53662; earlier versions may be affected). The vulnerability is described as improper access control that could let an attacker with physical access alter scripts, enabling code execution with root privileges. Publi...

CVE-2018-8858

The CVE-2018-8858 issue affects Vecna VGo Robot firmware versions 3.0.3.52164 and 3.0.3.53662 (prior versions may be affected). The vulnerability corresponds to CVE-2018-8858: insufficiently protected credentials that could allow an attacker with firmware access to extract credentials. ICS-CERT u...