CVE-2023-3104
Missing Authentication for Critical Function in Unitree Robotics A1
- State
- Published
- Severity
- 5.7 Medium
- Published
- Nov 22, 2023
- Updated
- Aug 2, 2024
- Reserved
- Jun 5, 2023
Description
Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.7 Medium | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | INCIBE |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
A1Unitree Robotics |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.