Description (CNA)
MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mobile Industrial Robots / MiR Robots | affected 0 before 3.0.0 |
| Mobile Industrial Robots / MiR Fleet | affected 0 before 3.0.0 |
CWE
CWE-863
References
- https://mobile-industrial-robots.com/security-advisories/insufficient-authorization-when-creating-notes
- https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/
ADP enrichment
No English description supplied.
No references supplied.