PatchTheCVEmir250 firmware vulnerabilities and fixes
Recent CVEs affecting mir250 firmware, with upgrade or downgrade steps. 12 tracked.
Also searched as: mir250firmware.
mir250 firmware has 12 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 12. Most recent: 2020-06-24. Highest priority: CVE-2020-10272 (score 65/100).
- CVE-2020-10280 HIGH 7.5 UPGRADE MITIGATE The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP he
- CVE-2020-10279 CRITICAL 9.8 UPGRADE UPGRADE MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for
- CVE-2020-10278 MEDIUM 4.6 UPGRADE UPGRADE The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify se
- CVE-2020-10277 MEDIUM 6.4 UPGRADE MITIGATE There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extrac
- CVE-2020-10276 CRITICAL 9.8 UPGRADE MITIGATE The password for the safety PLC is the default and thus easy to find (in manuals, etc.)
- CVE-2020-10275 CRITICAL 9.8 UPGRADE MITIGATE The access tokens for the REST API are directly derived from the publicly available default credentials for th
- CVE-2020-10274 HIGH 7.1 UPGRADE MITIGATE The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly availab
- CVE-2020-10273 HIGH 7.5 UPGRADE UPGRADE MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellect
- CVE-2020-10272 CRITICAL 9.8 UPGRADE UPGRADE MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computa
- CVE-2020-10271 CRITICAL 9.8 UPGRADE UPGRADE MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computa
- CVE-2020-10270 CRITICAL 9.8 UPGRADE UPGRADE Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's pos
- CVE-2020-10269 CRITICAL 9.8 UPGRADE UPGRADE One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet ve
FAQ
How do I fix mir250 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mir250 firmware being exploited right now?
None of the tracked mir250 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mir250 firmware CVE should I patch first?
CVE-2020-10272 currently ranks highest (65/100): MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computa.