Description (CNA)
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mobile Industrial Robots / MiR Robots | affected 0 before 3.0.0 |
| Mobile Industrial Robots / MiR Fleet | affected 0 before 3.0.0 |
CWE
CWE-78
References
- https://mobile-industrial-robots.com/security-advisories/command-injection
- https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/
ADP enrichment
No English description supplied.
No references supplied.