Riskcovery

CVE-2018-17933

State
Published
Severity
Not scored
Published
Oct 30, 2018
Updated
Aug 5, 2024
Reserved
Oct 2, 2018

Read the record on cve.org

Description

VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-285 IMPROPER AUTHORIZATION CWE-285

Affected Products

ProductVersions
VGo Robotn/a
  • Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected.Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.