critical9.8
CVE-2020-10275
The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface.
Impact
The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD, the token string is generated directly with base64(USERNAME:sha256(PASSWORD)). An unauthorized attacker inside the network can use the default credentials to compute the token and interact with the REST API to exfiltrate, infiltrate or delete data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mobile-Industrial-Robots | Mir100 Firmware | through 2.8.1.1 |
| Mobile-Industrial-Robots | Mir200 Firmware | All versions |
| Mobile-Industrial-Robots | Mir250 Firmware | All versions |
| Mobile-Industrial-Robots | Mir500 Firmware | All versions |
| Mobile-Industrial-Robots | Mir1000 Firmware | All versions |
| Easyrobotics | Er200 Firmware | All versions |
| Easyrobotics | Er-Lite Firmware | All versions |
| Easyrobotics | Er-Flex Firmware | All versions |
| Easyrobotics | Er-One Firmware | All versions |
| Uvd-Robots | Uvd Firmware | All versions |