What is CVE-2020-10272?

CVE-2020-10272 is a critical-severity vulnerability in Aliasrobotics Mir100, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2020-06-24.

How severe is CVE-2020-10272?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Aliasrobotics Mir100

CVE-2020-10272

MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph without any sort of authentication. This allows attackers with access to the internal wireless and wired networks to…

Vulnerability class: Broken Authentication

EPSS: 0.025 (82.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@aliasrobotics.com (x_refsource_CONFIRM, Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2020-10272?: CVE-2020-10272 is a critical-severity vulnerability in Aliasrobotics Mir100, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2020-06-24.
How severe is CVE-2020-10272?: Critical severity. CVSS v3 base score is 9.8 out of 10.