Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-10279 | MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop u… | Critical (9.8) | 2020-06-24 | Environment Specific |
| CVE-2020-10278 | The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings su… | Medium (4.6) | 2020-06-24 | Environment Specific |
| CVE-2020-10276 | The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated prog… | Critical (9.8) | 2020-06-24 | Environment Specific |
| CVE-2020-10274 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available defaul… | High (7.1) | 2020-06-24 | Environment Specific |
| CVE-2020-10273 | MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual prope… | High (7.5) | 2020-06-24 | Environment Specific |