MO
Vendor
Mobile-industrial-robots
34
CVEs
0
On KEV
0
New 30D
Products
MR8.8
MiR Robots
Mobile Industrial Robots
5 CVEs0 on KEV0 new
MF9.8
Mir100 Firmware
Mobile-industrial-robots
5 CVEs0 on KEV0 new
MF9.8
Mir1000 Firmware
Mobile-industrial-robots
5 CVEs0 on KEV0 new
MF9.8
Mir200 Firmware
Mobile-industrial-robots
5 CVEs0 on KEV0 new
MF9.8
Mir250 Firmware
Mobile-industrial-robots
5 CVEs0 on KEV0 new
MF9.8
Mir500 Firmware
Mobile-industrial-robots
5 CVEs0 on KEV0 new
MF8.8
MiR Fleet
Mobile Industrial Robots
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-9229 | MF MiR Fleet Mobile Industrial Robots | 5.3 | Aug 20 | Information Disclosure in MiR robots and MiR fleet through verbose error pages |
| CVE-2025-9228 | MF MiR Fleet Mobile Industrial Robots | 4.3 | Aug 20 | Insufficient authorization when creating notes |
| CVE-2025-9225 | MR MiR Robots Mobile Industrial Robots | 5.5 | Aug 20 | Cross-site scripting (XSS) in MiR robots and MiR fleet |
| CVE-2025-8749 | MR MiR Robots Mobile Industrial Robots | 6.5 | Aug 8 | Path traversal vulnerability in MiR robot software via API requests |
| CVE-2025-8748 | MR MiR Robots Mobile Industrial Robots | 8.8 | Aug 8 | OS command injection in MiR robots and MiR fleet via crafted HTTP requests |
| CVE-2020-10280 | MF Mir500 Firmware Mobile-industrial-robots | 7.5 | Jun 24 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard |
| CVE-2020-10277 | MF Mir250 Firmware Mobile-industrial-robots | 6.4 | Jun 24 | There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege… |
| CVE-2020-10276 | MF Mir100 Firmware Mobile-industrial-robots | 9.8 | Jun 24 | The password for the safety PLC is the default and thus easy to find (in manuals, etc.) |
| CVE-2020-10275 | MF Mir100 Firmware Mobile-industrial-robots | 9.8 | Jun 24 | The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface |
| CVE-2020-10274 | MF Mir200 Firmware Mobile-industrial-robots | 7.1 | Jun 24 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard (refer to… |