CVE-2020-10275
An unauthorized attacker inside the network can use the default credentials to compute the token and interact with the REST API to exfiltrate, infiltrate or delete data.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD, the token string is generated directly with base64(USERNAME:sha256(PASSWORD)). An unauthorized attacker inside the network can use the default credentials to compute the token and interact with the REST API to exfiltrate, infiltrate or delete data.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.96% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-261, CWE-326
- Affected
- mobile-industrial-robots/mir100 firmware · mobile-industrial-robots/mir200 firmware · mobile-industrial-robots/mir250 firmware · mobile-industrial-robots/mir500 firmware · mobile-industrial-robots/mir1000 firmware · easyrobotics/er200 firmware · easyrobotics/er-lite firmware · easyrobotics/er-flex firmware · easyrobotics/er-one firmware · uvd-robots/uvd firmware
- Source
- cve@aliasrobotics.com
References
- https://github.com/aliasrobotics/RVD/issues/2565Third Party Advisory
- https://github.com/aliasrobotics/RVD/issues/2565Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.