What is CVE-2020-10269?

CVE-2020-10269 is a critical-severity vulnerability in Aliasrobotics Mir100, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2020-06-24.

How severe is CVE-2020-10269?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2020-10269 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Aliasrobotics Mir100

CVE-2020-10269

One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet vehicles comes pre-configured in WiFi Master (Access Point) mode. Credentials to such wireless Access Point default to well known and widely spread SSID (MiR_RXXXX) and passwords (omitted). This information is also available in past User Guides and manuals which the vendor distributed. We have confirmed this flaw in MiR100 and MiR200 but it might also apply to MiR250, MiR500 and MiR1000.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@aliasrobotics.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-10269?: CVE-2020-10269 is a critical-severity vulnerability in Aliasrobotics Mir100, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2020-06-24.
How severe is CVE-2020-10269?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2020-10269 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.