Frodobots Frodobots Earthrover Mini+ Firmware
6 CVEs affecting Frodobots Frodobots Earthrover Mini+ Firmware. Latest disclosed: 2026-11-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-121690 | | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. All processes run as root and the system lacks pri… | |
CVE-2026-121689 | | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plain… | |
CVE-2026-121688 | | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. The STM32 motor‑controller firmware is… | |
CVE-2026-121687 | | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are exposed without authentication. 1. HTTP REST API… | |
CVE-2026-121686 | | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts a… | |
CVE-2026-121685 | | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These include fleet‑wide credentials, inclu… |