Mobile Industrial Robots MiR Software Insufficient Authorization Vulnerability in Note Creation

A vulnerability exists in Mobile Industrial Robots (MiR) software versions prior to 3.0.0, where insufficient authorization controls allow low-privilege users to create text notes meant for administrative users. This issue affects MiR Robots and MiR Fleet applications.

Impact

Exploitation of this vulnerability allows low-privilege users to create notes that are intended for administrative users, potentially leading to unauthorized access to sensitive information or administrative functions.

Remediation

Users are advised to update to the latest software version, at least version 3.0.0. If an immediate update is not possible, it is recommended to operate the MiR system in a segmented and secured network with strict firewall rules and to secure user accounts on the MiR system as recommended in the MiR Cybersecurity Guide.