← Back

CVE-2020-10279

nvd nist
Published: Jun 24, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.

Affected (10)

Show all products
Aliasrobotics: Mir100 Firmware, Mir200 Firmware, Mir250 Firmware, Mir500 Firmware, Mir1000 Firmware · Mobile Industrial Robotics: Er200 Firmware · Enabled Robotics: Er Lite Firmware, Er Flex Firmware, Er One Firmware · Uvd Robots: Uvd Robots Firmware
Aliasrobotics
5 products
Mir100 Firmware
Mir200 Firmware
Mir250 Firmware
Mir500 Firmware
Mir1000 Firmware
Mobile Industrial Robotics
1 product
Er200 Firmware
Enabled Robotics
3 products
Er Lite Firmware
Er Flex Firmware
Er One Firmware
Uvd Robots
1 product
Uvd Robots Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mir100 Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Aliasrobotics
Mir100
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mir200 Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Aliasrobotics
Mir200
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mir250 Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Aliasrobotics
Mir250
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mir500 Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Aliasrobotics
Mir500
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mir1000 Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Aliasrobotics
Mir1000
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Er200 Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Mobile Industrial Robotics
Er200
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Er Lite Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Enabled Robotics
Er Lite
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Er Flex Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Enabled Robotics
Er Flex
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Er One Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Enabled Robotics
Er One
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Uvd Robots Firmware
Up to 2.8.1.1
Running on/withPlatform Versions
Uvd Robots
Uvd Robots
All versions

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.
CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (2)

Source: cve@aliasrobotics.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.