RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
Priority LOW 29CWE-656Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · Low · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.
Why it matters now
EPSS 0.00375 31st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mobile Industrial Robots A/S | MiR100 | up to v2.8.1.1 | — | No fix listed | CNA |
- MiR100 VendorMobile Industrial Robots A/S Affected up to v2.8.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mobile-industrial-robots:mir100_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir250_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir500_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir1000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
- cpe:2.3:o:mobile-industrial-robots:mir100_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir500_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir1000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:easyrobotics:er200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:easyrobotics:er-lite_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er-lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:easyrobotics:er-flex_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er-flex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:easyrobotics:er-one_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:uvd-robots:uvd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Uvd-robots |
| cpe:2.3:h:uvd-robots:uvd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Uvd-robots |
- cpe:2.3:o:easyrobotics:er200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:easyrobotics:er-lite_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er-lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:easyrobotics:er-flex_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er-flex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:easyrobotics:er-one_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:uvd-robots:uvd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Uvd-robots
- cpe:2.3:h:uvd-robots:uvd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Uvd-robots
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-10277
- 2026-10-03 Alias added: GHSA-6635-xfqx-gr6m
References
More Mobile Industrial Robots A/S Mir1000 Firmware vulnerabilities
- TI-2020-08283 RVD#2558: Default credentials on SICK PLC allows disabling safety features CVSS 3.1CRITICAL 9.8
- TI-2020-08282 RVD#2565: Weak token generation for the REST API. CVSS 3.1CRITICAL 9.8
- TI-2020-08287 RVD#2568: Apache server is vulnerable to a DoS CVSS 3.1HIGH 7.5
- TI-2020-08281 RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps) CVSS 3.1HIGH 7.1
Sources
- CVE-2020-10277 · CVE Program
- CVE-2020-10277 · NVD
- FIRST EPSS
- GHSA-6635-xfqx-gr6m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences