Easyrobotics Er200
5 CVEs affecting Easyrobotics Er200. Latest disclosed: 2020-06-24. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10276 | Critical | 9.8 | 2020-06-24 | The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, ef… |
CVE-2020-10275 | Critical | 9.8 | 2020-06-24 | The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD… |
CVE-2020-10280 | High | 7.5 | 2020-06-24 | The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the das… |
CVE-2020-10274 | High | 7.1 | 2020-06-24 | The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard… |
CVE-2020-10277 | Medium | 6.4 | 2020-06-24 | There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file)… |