Ghost Robotics Vision 60 Encrypted WiFi and SSH Credential Vulnerability

A vulnerability exists in the Ghost Robotics Vision 60 robot, specifically in version 0.27.2, due to the presence of encrypted WiFi and SSH credentials within the robot's APK. This vulnerability enables an attacker to connect to the robot's WiFi network and access its data, as the robot operates on ROS 2 without default authentication. Furthermore, the attacker can use SSH to gain full control over the robot, potentially causing physical damage to the robot or its surroundings.

Impact

Exploitation of this vulnerability allows for unauthorized access to the robot's WiFi network and data, along with full control over the robot via SSH, which could lead to physical damage to the robot or its environment.