CVE-2020-10280

Published: Jun 24, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.

Affected (10)

Products: Mobile Industrial Robots: Mir100 Firmware, Mir200 Firmware, Mir250 Firmware, Mir500 Firmware, Mir1000 Firmware · Easyrobotics: Er200 Firmware, Er Lite Firmware, Er Flex Firmware, Er One Firmware · Uvd Robots: Uvd Firmware

Mobile Industrial Robots

5 products

4 products

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir100 Firmware	Up to 2.8.1.1

Running on/with	Platform Versions
Mobile Industrial Robots Mir100	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir200 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir200	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir250 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir250	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir500 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir500	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mobile Industrial Robots Mir1000 Firmware	All versions

Running on/with	Platform Versions
Mobile Industrial Robots Mir1000	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er200 Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er200	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er Lite Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er Lite	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er Flex Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er Flex	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easyrobotics Er One Firmware	All versions

Running on/with	Platform Versions
Easyrobotics Er One	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Uvd Robots Uvd Firmware	All versions

Running on/with	Platform Versions
Uvd Robots Uvd	All versions

Related CWEs

CWE-239

Failure to Handle Incomplete Element

The product does not properly handle when a particular element is not completely specified.

CWE-404

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (2)

https://github.com/aliasrobotics/RVD/issues/2568

Source: cve@aliasrobotics.com

Third Party Advisory

https://github.com/aliasrobotics/RVD/issues/2568

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.