EA
Vendor
Easyrobotics
20
CVEs
0
On KEV
0
New 30D
Products
EF9.8
Er-flex Firmware
Easyrobotics
5 CVEs0 on KEV0 new
EF9.8
Er-lite Firmware
Easyrobotics
5 CVEs0 on KEV0 new
EF9.8
Er-one Firmware
Easyrobotics
5 CVEs0 on KEV0 new
EF9.8
Er200 Firmware
Easyrobotics
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-10280 | EF Er200 Firmware Easyrobotics | 7.5 | Jun 24 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard |
| CVE-2020-10277 | EF Er200 Firmware Easyrobotics | 6.4 | Jun 24 | There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege… |
| CVE-2020-10276 | EF Er200 Firmware Easyrobotics | 9.8 | Jun 24 | The password for the safety PLC is the default and thus easy to find (in manuals, etc.) |
| CVE-2020-10275 | EF Er200 Firmware Easyrobotics | 9.8 | Jun 24 | The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface |
| CVE-2020-10274 | EF Er200 Firmware Easyrobotics | 7.1 | Jun 24 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard (refer to… |