EF
Product
Er-flex Firmware
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 1Medium 1Low 0
Watch
Add Er-flex Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10279 | 9.8 | Jun 24 | MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for… Affected: through 2.8.1.1 |
| CVE-2020-10272 | 9.8 | Jun 24 | MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph without any sort of authentication Affected: through 2.8.1.1 |
| CVE-2020-10271 | 9.8 | Jun 24 | MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph to all network interfaces, wireless and wired Affected: through 2.8.1.1 |
| CVE-2020-10270 | 9.8 | Jun 24 | Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's possible to access the Control Dashboard on a hardcoded IP address Affected: through 2.8.1.1 |
| CVE-2020-10269 | 9.8 | Jun 24 | One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet vehicles comes pre-configured in WiFi Master (Access Point) mode Affected: through 2.8.1.1 |
| CVE-2020-10273 | 7.5 | Jun 24 | MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots Affected: through 2.8.1.1 |
| CVE-2020-10278 | 4.6 | Jun 24 | The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order Affected: through 2.8.1.1 |
Showing 7