PatchTheCVEeasyrobotics vulnerabilities
Recent CVEs affecting easyrobotics products. 5 tracked.
easyrobotics has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2020-06-24. Highest priority: CVE-2020-10276 (score 58/100).
- CVE-2020-10280 HIGH 7.5 UPGRADE MITIGATE The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP he
- CVE-2020-10277 MEDIUM 6.4 UPGRADE MITIGATE There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extrac
- CVE-2020-10276 CRITICAL 9.8 UPGRADE MITIGATE The password for the safety PLC is the default and thus easy to find (in manuals, etc.)
- CVE-2020-10275 CRITICAL 9.8 UPGRADE MITIGATE The access tokens for the REST API are directly derived from the publicly available default credentials for th
- CVE-2020-10274 HIGH 7.1 UPGRADE MITIGATE The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly availab
FAQ
How do I fix easyrobotics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyrobotics being exploited right now?
None of the tracked easyrobotics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyrobotics CVE should I patch first?
CVE-2020-10276 currently ranks highest (58/100): The password for the safety PLC is the default and thus easy to find (in manuals, etc.).