PT-2025-48431 · Mobile Industrial Robots · Mir Fleet+1

Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-13819

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MiR Robot and Fleet software (affected versions not specified)

Description An open redirect exists in the web server component of MiR Robot and Fleet software. This allows a remote attacker to redirect users to arbitrary external websites through a crafted parameter, potentially enabling phishing or social engineering attacks. The vulnerability involves manipulating a parameter to control the redirection target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-13819

Affected Products

Mir Fleet

Mir Robot

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-13819 · Security Note
• https://twitter.com/VulmonFeeds/status/1995450894213685332 · Twitter Post
• https://twitter.com/CVEnew/status/1995430044194492556 · Twitter Post
• https://t.me/cveNotify/144385 · Telegram Post
• https://t.me/CVEtracker/38526 · Telegram Post
• https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide · Note
• https://mobile-industrial-robots.com/security-advisories/cve-2025-13819-open-redirect · Note