CVE-2020-10279

Katalog CVE

CVSS 9.8 · Critical EPSS 0,97%

Kerentanan Incorrect Default Permissions pada aliasrobotics mir100 firmware, aliasrobotics mir200 firmware +8 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.

Rincian

Terbit di NVD

24 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-1188: Initialization of a Resource with an Insecure Default

EPSS (30 hari)

0,97% peluang dieksploitasi; lebih tinggi dari 61,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/aliasrobotics/RVD/issues/2569 advisory pihak ketiga