PT-2025-43059 · Ghost Robotics · Ghost Robotics Vision 60

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-41108

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghost Robotics Vision 60 version 0.27.2

Description The communication protocol in the software could allow an attacker to send commands to the robot, impersonating the control station and gaining unauthorized full control. The lack of encryption and authentication in the communication protocol allows an attacker to capture and replicate legitimate traffic, sending any valid command to the robot via Wi-Fi or 4G/LTE connections. The protocol is based on MAVLink, a widely documented protocol, which may increase the likelihood of attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-41108

Affected Products

Ghost Robotics Vision 60

References · 4

• https://osv.dev/vulnerability/CVE-2025-41108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-41108 · Security Note
• https://t.me/CVEtracker/35479 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ghost-robotics-vision-60 · Note