PT-2018-14281 · Vgo · Vgo Robot

Publicado 2018-10-30 · Atualizado 2019-10-09 · CVE-2018-17931

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VGo Robot versions 3.0.3.52164 through 3.0.3.53662 VGo Robot versions prior to 3.0.3.52164

Description The issue allows an attacker with physical access to potentially alter scripts, which may enable code execution with root privileges.

Recommendations For VGo Robot versions 3.0.3.52164 through 3.0.3.53662, restrict physical access to the device to prevent potential script alterations. For VGo Robot versions prior to 3.0.3.52164, restrict physical access to the device to prevent potential script alterations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2018-17931

Produtos afetados

Vgo Robot

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-17931 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-17931 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 · Nota