CVE-2020-10277

Published: Jun 24, 2020Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Exploitability: 0.9 / Impact: 5.5

Source: NVD

Description

There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.

Affected (10)

Products: Mobile Industrial Robots: Mir100 Firmware, Mir200 Firmware, Mir250 Firmware, Mir500 Firmware, Mir1000 Firmware · Easyrobotics: Er200 Firmware, Er Lite Firmware, Er Flex Firmware, Er One Firmware · Uvd Robots: Uvd Firmware

Mobile Industrial Robots

5 products

4 products

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir100 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Mobile Industrial Robots Mir100	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir200 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir200	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir250 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir250	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir500 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir500	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir1000 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir1000	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er200 Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er200	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er Lite Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er Lite	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er Flex Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er Flex	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er One Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er One	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Uvd Robots Uvd Firmware	All versions

Running on/with	Platform Versions
Uvd Robots Uvd	All versions

Related CWEs

CWE-656

Reliance on Security Through Obscurity

The product uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.

References (2)

https://github.com/aliasrobotics/RVD/issues/2562

Source: cve@aliasrobotics.com

Third Party Advisory

https://github.com/aliasrobotics/RVD/issues/2562

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.