CVE-2020-10278

RVD#2561: Unprotected BIOS allows user to boot from live OS image.

State: Published
Severity: 6.1 Medium
Published: Jun 24, 2020
Updated: Sep 16, 2024
Reserved: Mar 10, 2020

Description

The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.

Scores

CVSS	Score	Vector	Source
3.0	6.1 Medium	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H	Alias

Weaknesses

CWE-284

Affected Products

Product	Versions
MiR100Mobile Industrial Robots A/S	v2.8.1.1 and beforeAffected

References

https://github.com/aliasrobotics/RVD/issues/2561

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.