Mobile Industrial Robots Path Traversal Vulnerability in API Endpoint
Vulnerability
A path traversal vulnerability has been identified in Mobile Industrial Robots (MiR) software versions prior to 3.0.0. This vulnerability allows authenticated users to extract files from the robot's file system by sending a crafted API request.
Impact
Exploitation of this vulnerability could lead to unauthorized access to files on the robot's file system.
Remediation
Users are advised to upgrade to version 3.0.0 or newer. If an immediate upgrade is not possible, it is recommended to operate the MiR system in a segmented and secured network with strict firewall rules and to secure user accounts as recommended in the MiR Cybersecurity Guide.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.