CVE-2020-10272

RVD#2554: MiR ROS computational graph presents no authentication mechanisms

State: Published
Severity: 10.0 Critical
Published: Jun 24, 2020
Updated: Sep 17, 2024
Reserved: Mar 10, 2020

Description

MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph without any sort of authentication. This allows attackers with access to the internal wireless and wired networks to take control of the robot seamlessly. In combination with CVE-2020-10269 and CVE-2020-10271, this flaw allows malicious actors to command the robot at desire.

Scores

CVSS	Score	Vector	Source
3.0	10.0 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	Alias

Weaknesses

CWE-306

Affected Products

Product	Versions
MiR100Mobile Industrial Robots A/S	v2.8.1.1 and beforeAffected

References

https://github.com/aliasrobotics/RVD/issues/2554

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.