PT-2018-14281 · Vgo · Vgo Robot

Published 2018-10-30 · Updated 2019-10-09 · CVE-2018-17931

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VGo Robot versions 3.0.3.52164 through 3.0.3.53662 VGo Robot versions prior to 3.0.3.52164

Description The issue allows an attacker with physical access to potentially alter scripts, which may enable code execution with root privileges.

Recommendations For VGo Robot versions 3.0.3.52164 through 3.0.3.53662, restrict physical access to the device to prevent potential script alterations. For VGo Robot versions prior to 3.0.3.52164, restrict physical access to the device to prevent potential script alterations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2018-17931

Affected Products

Vgo Robot

References · 3

• https://osv.dev/vulnerability/CVE-2018-17931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17931 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 · Note