CVE-2020-10273

HIGH

MiR and ER Series Firmware < 2.8.1.1 - Cleartext Storage of Sensitive Information

Title source: llm
STIX 2.1

Description

MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots. This flaw allows attackers with access to the robot or the robot network (while in combination with other flaws) to retrieve and easily exfiltrate all installed intellectual property and data.

References (1)

Core 1
Core References
Issue Tracking, Third Party Advisory x_refsource_confirm
https://github.com/aliasrobotics/RVD/issues/2560

Scores

CVSS v3 7.5
EPSS 0.0086
EPSS Percentile 53.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-312 CWE-311
Status published
Products (10)
aliasrobotics/mir1000_firmware < 2.8.1.1
aliasrobotics/mir100_firmware < 2.8.1.1
aliasrobotics/mir200_firmware < 2.8.1.1
aliasrobotics/mir250_firmware < 2.8.1.1
aliasrobotics/mir500_firmware < 2.8.1.1
enabled-robotics/er-flex_firmware < 2.8.1.1
enabled-robotics/er-lite_firmware < 2.8.1.1
enabled-robotics/er-one_firmware < 2.8.1.1
mobile-industrial-robotics/er200_firmware < 2.8.1.1
uvd-robots/uvd_robots_firmware < 2.8.1.1
Published Jun 24, 2020
Tracked Since Feb 18, 2026