Exposure of Resource to Wrong Sphere in Mobile Industrial Robots products - CVE-2020-10271

Vulnerability details

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to two APIs to the Robot Operating System (ROS) used in MiR robots are accessible from both wired and wireless network interfaces. A remote attacker can control of the robot, cause a denial of service (DoS) condition and exfiltrate data over the web interface. 

Affected software

How to mitigate CVE-2020-10271

External References

• https://github.com/aliasrobotics/RVD/issues/2555
• https://us-cert.cisa.gov/ics/advisories/icsa-21-280-02

Related Security Bulletins

• Multiple vulnerabilities in Mobile Industrial Robots Vehicles and MiR Fleet Software