medium4.6
CVE-2020-10278
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order.
Impact
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aliasrobotics | Mir100 Firmware | through 2.8.1.1 |
| Aliasrobotics | Mir200 Firmware | through 2.8.1.1 |
| Aliasrobotics | Mir250 Firmware | through 2.8.1.1 |
| Aliasrobotics | Mir500 Firmware | through 2.8.1.1 |
| Aliasrobotics | Mir1000 Firmware | through 2.8.1.1 |
| Mobile-Industrial-Robotics | Er200 Firmware | through 2.8.1.1 |
| Enabled-Robotics | Er-Lite Firmware | through 2.8.1.1 |
| Enabled-Robotics | Er-Flex Firmware | through 2.8.1.1 |
| Enabled-Robotics | Er-One Firmware | through 2.8.1.1 |
| Uvd-Robots | Uvd Robots Firmware | through 2.8.1.1 |