The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the laser scanner are not affected (thus it is hard to detect before something happens) though the laser scanner configuration can also be affected altering further the safety of the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HEasyrobotics Er200
HWEasyroboticsall versionsEasyrobotics Er200 Firmware
OSEasyroboticsall versionsEasyrobotics Er Flex
HWEasyroboticsall versionsEasyrobotics Er Flex Firmware
OSEasyroboticsall versionsEasyrobotics Er Lite
HWEasyroboticsall versionsEasyrobotics Er Lite Firmware
OSEasyroboticsall versionsEasyrobotics Er One
HWEasyroboticsall versionsEasyrobotics Er One Firmware
OSEasyroboticsall versionsMobile Industrial Robots Mir100
HWMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir1000
HWMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir1000 Firmware
OSMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir100 Firmware
OSMobile-Industrial-Robots≤ 2.8.1.1Mobile Industrial Robots Mir200
HWMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir200 Firmware
OSMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir250
HWMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir250 Firmware
OSMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir500
HWMobile-Industrial-Robotsall versionsMobile Industrial Robots Mir500 Firmware
OSMobile-Industrial-Robotsall versionsUvd Robots Uvd
HWUvd-Robotsall versionsUvd Robots Uvd Firmware
OSUvd-Robotsall versions
Related vulnerabilities
Słabe tokeny REST API w robotach MiR — przewidywalny mechanizm autoryzacji
The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly availab...
The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP he...
There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extrac...
Domyślne, jawne dane dostępowe do WiFi Access Point w robocie MiR