Vulnetix
Try Vulnetix Request Demo
CVE-2020-10277 PUBLISHED CVSS 6.400000095367432 MEDIUM

There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.

EPSS 0.06% · 18.2th percentile

Risk Scores

CVSS v3.0
6.400000095367432
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
EPSS Score
0.06%
18.2th percentile

Affected Products

VendorProductVersions
easyroboticser-flex_firmware
easyroboticser-lite_firmware
easyroboticser-one_firmware
mobile-industrial-robotsmir500_firmware
mobile-industrial-robotsmir100_firmware0
mobile-industrial-robotsmir250_firmware
mobile-industrial-robotsmir1000_firmware
easyroboticser200_firmware
Mobile Industrial Robots A/SMiR100v2.8.1.1 and before
mobile-industrial-robotsmir200_firmware
uvd-robotsuvd_firmware

Timeline

References

Open in Interactive Console →