Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

MiR100 — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in MiR100, with AI-generated Chinese analysis, references, and POCs.

Vendor: Mobile Industrial Robots A/S

CVE IDTitleCVSSSeverityPublished
CVE-2020-10279 RVD#2569: Insecure operating system defaults in MiR robots CWE-276 8.1 -2020-06-24
CVE-2020-10280 RVD#2568: Apache server is vulnerable to a DoS CWE-239 7.5 -2020-06-24
CVE-2020-10269 RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point CWE-798 9.8 -2020-06-24
CVE-2020-10275 RVD#2565: Weak token generation for the REST API. CWE-261 8.1 -2020-06-24
CVE-2020-10273 RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers CWE-311 7.5 -2020-06-24
CVE-2020-10278 RVD#2561: Unprotected BIOS allows user to boot from live OS image. CWE-284 4.6 -2020-06-24
CVE-2020-10277 RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation CWE-656 6.6 -2020-06-24
CVE-2020-10270 RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard CWE-798 9.8 -2020-06-24
CVE-2020-10276 RVD#2558: Default credentials on SICK PLC allows disabling safety features CWE-798 9.8 -2020-06-24
CVE-2020-10271 RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired ones CWE-668 9.8 -2020-06-24
CVE-2020-10274 RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps) CWE-200 6.5 -2020-06-24
CVE-2020-10272 RVD#2554: MiR ROS computational graph presents no authentication mechanisms CWE-306 8.8 -2020-06-24

All 12 known CVE vulnerabilities affecting MiR100 with full Chinese analysis, references, and POCs where available.