#VU12167 Information disclosure in VGo Celia - CVE-2018-8860

Vulnerability identifier: #VU12167

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2018-8860

CWE-ID: CWE-319

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vulnerable software:
VGo Celia

Software vendor:
Vecna Technologies

The vulnerability allows an adjacent attacker to obtain potentially sensitive information on the target system.

The weakness exists due to cleartext transmission of sensitive information. An adjacent attacker can capture firmware updates through the adjacent network.

Update to version 3.0.3.53662.

• http://go.zingbox.com/rs/562-ZPO-907/images/Zingbox%20Whitepaper%20-%20Telepresence%20Robot%20Vulnerabilities.pdf