mobile-industrial-robots vulnerabilities

Recent CVEs affecting mobile-industrial-robots products. 5 tracked.

mobile-industrial-robots has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2020-06-24. Highest priority: CVE-2020-10276 (score 58/100).

CVE-2020-10280 HIGH 7.5 UPGRADE MITIGATE The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP he
CVE-2020-10277 MEDIUM 6.4 UPGRADE MITIGATE There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extrac
CVE-2020-10276 CRITICAL 9.8 UPGRADE MITIGATE The password for the safety PLC is the default and thus easy to find (in manuals, etc.)
CVE-2020-10275 CRITICAL 9.8 UPGRADE MITIGATE The access tokens for the REST API are directly derived from the publicly available default credentials for th
CVE-2020-10274 HIGH 7.1 UPGRADE MITIGATE The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly availab

FAQ

How do I fix mobile-industrial-robots vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mobile-industrial-robots being exploited right now?

None of the tracked mobile-industrial-robots CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mobile-industrial-robots CVE should I patch first?

CVE-2020-10276 currently ranks highest (58/100): The password for the safety PLC is the default and thus easy to find (in manuals, etc.).

Products

RSS feed for mobile-industrial-robots · ← Back to latest CVEs