VDB
CVE-2020-10279
CVE-2020-10279
PUBLISHED
CVSS 10 CRITICAL
MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.
EPSS 0.29% · 52.4th percentile
Risk Scores
CVSS v3.0
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H
EPSS Score
0.29%
52.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| enabled-robotics | er-lite_firmware | 0 |
| enabled-robotics | er-flex_firmware | 0 |
| enabled-robotics | er-one_firmware | 0 |
| mobile-industrial-robotics | er200_firmware | 0 |
| aliasrobotics | mir100_firmware | 0 |
| uvd-robots | uvd_robots_firmware | 0 |
| Mobile Industrial Robots A/S | MiR100 | v2.8.1.1 and before |
| aliasrobotics | mir250_firmware | 0 |
| aliasrobotics | mir200_firmware | 0 |
| aliasrobotics | mir500_firmware | 0 |
| aliasrobotics | mir1000_firmware | 0 |
Timeline
- Jun 24, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 22, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 25, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 27, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 2, 2022 EPSS Score
- Sep 4, 2022 EPSS Score