uvd-robots records

12 published records for vendor uvd-robots.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-10272No exploit	RVD#2554: MiR ROS computational graph presents no authentication mechanismsaliasrobotics · mir100 firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	2.4%	Jun 24, 2020
40Plan	CVE-2020-10271No exploit	RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired onesaliasrobotics · mir100 firmware · CWE-668 Pre-auth	Critical9.8	—	1.8%	Jun 24, 2020
39Monitor	CVE-2020-10270No exploit	RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboardaliasrobotics · mir100 firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.6%	Jun 24, 2020
39Monitor	CVE-2020-10276No exploit	RVD#2558: Default credentials on SICK PLC allows disabling safety featuresmobile-industrial-robots · mir100 firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.4%	Jun 24, 2020
39Monitor	CVE-2020-10269No exploit	RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Pointaliasrobotics · mir100 firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.3%	Jun 24, 2020
39Monitor	CVE-2020-10279No exploit	RVD#2569: Insecure operating system defaults in MiR robotsaliasrobotics · mir100 firmware · CWE-276 Pre-auth Race condition	Critical9.8	—	0.9%	Jun 24, 2020
39Monitor	CVE-2020-10275No exploit	RVD#2565: Weak token generation for the REST API.mobile-industrial-robots · mir100 firmware · CWE-261 Pre-auth Hard-coded credentials	Critical9.8	—	0.9%	Jun 24, 2020
30Monitor	CVE-2020-10280No exploit	RVD#2568: Apache server is vulnerable to a DoSmobile-industrial-robots · mir100 firmware · CWE-239 Pre-auth Denial of service	High7.5	—	1.1%	Jun 24, 2020
30Monitor	CVE-2020-10273No exploit	RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllersaliasrobotics · mir100 firmware · CWE-311 Pre-auth	High7.5	—	0.8%	Jun 24, 2020
28Monitor	CVE-2020-10274No exploit	RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)mobile-industrial-robots · mir100 firmware · CWE-200 Hard-coded credentials Info leak	High7.1	—	0.9%	Jun 24, 2020
25Monitor	CVE-2020-10277No exploit	RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalationmobile-industrial-robots · mir100 firmware · CWE-656	Medium6.4	—	0.3%	Jun 24, 2020
18Monitor	CVE-2020-10278No exploit	RVD#2561: Unprotected BIOS allows user to boot from live OS image.aliasrobotics · mir100 firmware · CWE-284 Broken access control (IDOR)	Medium4.6	—	0.9%	Jun 24, 2020

CVE-2020-10272
40Plan
RVD#2554: MiR ROS computational graph presents no authentication mechanisms
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
aliasrobotics · mir100 firmwareJun 24, 2020
CVE-2020-10271
40Plan
RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired ones
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
aliasrobotics · mir100 firmwareJun 24, 2020
CVE-2020-10270
39Monitor
RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
aliasrobotics · mir100 firmwareJun 24, 2020
CVE-2020-10276
39Monitor
RVD#2558: Default credentials on SICK PLC allows disabling safety features
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
mobile-industrial-robots · mir100 firmwareJun 24, 2020
CVE-2020-10269
39Monitor
RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
aliasrobotics · mir100 firmwareJun 24, 2020
CVE-2020-10279
39Monitor
RVD#2569: Insecure operating system defaults in MiR robots
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Race condition
aliasrobotics · mir100 firmwareJun 24, 2020
CVE-2020-10275
39Monitor
RVD#2565: Weak token generation for the REST API.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
mobile-industrial-robots · mir100 firmwareJun 24, 2020
CVE-2020-10280
30Monitor
RVD#2568: Apache server is vulnerable to a DoS
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
mobile-industrial-robots · mir100 firmwareJun 24, 2020
CVE-2020-10273
30Monitor
RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
aliasrobotics · mir100 firmwareJun 24, 2020
CVE-2020-10274
28Monitor
RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)
HighCVSS 7.1No exploitEPSS 0%
- Hard-coded credentials
- Info leak
mobile-industrial-robots · mir100 firmwareJun 24, 2020
CVE-2020-10277
25Monitor
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
MediumCVSS 6.4No exploitEPSS 0%
mobile-industrial-robots · mir100 firmwareJun 24, 2020
CVE-2020-10278
18Monitor
RVD#2561: Unprotected BIOS allows user to boot from live OS image.
MediumCVSS 4.6No exploitEPSS 0%
- Broken access control (IDOR)
aliasrobotics · mir100 firmwareJun 24, 2020