VDB

CVE-2020-10279

CVE-2020-10279 PUBLISHED CVSS 10 CRITICAL

Reported by Alias · Published June 24, 2020

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.

Risk Scores

CVSS 3.0
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H

Affected Products

VendorProductVersions
Mobile Industrial Robots A/SMiR100v2.8.1.1 and before
Mobile Industrial Robots A/SMiR1002.8.1.1

Timeline

  • Jun 24, 2020 CVE Published
  • Jun 25, 2020 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 26, 2021 EPSS Score
  • Dec 31, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 7, 2022 EPSS Score
  • May 24, 2022 CVE Updated

References

  • x_refsource_CONFIRM
Open in Interactive Console →
$ Console Community · 50/day Open console ›