CVE-2020-10273

Published: Jun 24, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots. This flaw allows attackers with access to the robot or the robot network (while in combination with other flaws) to retrieve and easily exfiltrate all installed intellectual property and data.

Affected (10)

Products: Aliasrobotics: Mir100 Firmware, Mir200 Firmware, Mir250 Firmware, Mir500 Firmware, Mir1000 Firmware · Mobile Industrial Robotics: Er200 Firmware · Enabled Robotics: Er Lite Firmware, Er Flex Firmware, Er One Firmware · +1 more

Show all products

Aliasrobotics: Mir100 Firmware, Mir200 Firmware, Mir250 Firmware, Mir500 Firmware, Mir1000 Firmware · Mobile Industrial Robotics: Er200 Firmware · Enabled Robotics: Er Lite Firmware, Er Flex Firmware, Er One Firmware · Uvd Robots: Uvd Robots Firmware

5 products

Mobile Industrial Robotics

1 product

3 products

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aliasrobotics Mir100 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Aliasrobotics Mir100	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aliasrobotics Mir200 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Aliasrobotics Mir200	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aliasrobotics Mir250 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Aliasrobotics Mir250	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aliasrobotics Mir500 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Aliasrobotics Mir500	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aliasrobotics Mir1000 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Aliasrobotics Mir1000	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robotics Er200 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Mobile Industrial Robotics Er200	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Enabled Robotics Er Lite Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Enabled Robotics Er Lite	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Enabled Robotics Er Flex Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Enabled Robotics Er Flex	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Enabled Robotics Er One Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Enabled Robotics Er One	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Uvd Robots Uvd Robots Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Uvd Robots Uvd Robots	All versions

Related CWEs

CWE-311

Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://github.com/aliasrobotics/RVD/issues/2560

Source: cve@aliasrobotics.com

Issue TrackingThird Party Advisory

https://github.com/aliasrobotics/RVD/issues/2560

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.