CVE-2020-10279

RVD#2569: Insecure operating system defaults in MiR robots

State: Published
Severity: 10.0 Critical
Published: Jun 24, 2020
Updated: Sep 17, 2024
Reserved: Mar 10, 2020

Description

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.

Scores

CVSS	Score	Vector	Source
3.0	10.0 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H	Alias

Weaknesses

CWE-276

Affected Products

Product	Versions
MiR100Mobile Industrial Robots A/S	v2.8.1.1 and beforeAffected

References

https://github.com/aliasrobotics/RVD/issues/2569

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.