ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-10277

—
CVSS 3.1
6.4 medium
EPSS
<1%p29
Published
()
Modified
Description

There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.

Vendors
mobile-industrial-robotseasyroboticsuvd-robots
Products
mir100 firmware, mir200 firmware, mir250 firmware, mir500 firmware, mir1000 firmware, er200 firmware, er-lite firmware, er-flex firmware, er-one firmware, uvd firmware
Weakness
CWE-656
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.