RVD#2561: Unprotected BIOS allows user to boot from live OS image.
Priority LOW 23CWE-284Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.
Summary
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
Why it matters now
EPSS 0.00966 61st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mobile Industrial Robots A/S | MiR100 | up to v2.8.1.1 | — | No fix listed | CNA |
- MiR100 VendorMobile Industrial Robots A/S Affected up to v2.8.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:aliasrobotics:mir100_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | aliasrobotics |
| cpe:2.3:h:aliasrobotics:mir100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | aliasrobotics |
| cpe:2.3:o:aliasrobotics:mir200_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | aliasrobotics |
| cpe:2.3:h:aliasrobotics:mir200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | aliasrobotics |
| cpe:2.3:o:aliasrobotics:mir250_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | aliasrobotics |
| cpe:2.3:h:aliasrobotics:mir250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | aliasrobotics |
| cpe:2.3:o:aliasrobotics:mir500_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | aliasrobotics |
| cpe:2.3:h:aliasrobotics:mir500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | aliasrobotics |
| cpe:2.3:o:aliasrobotics:mir1000_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | aliasrobotics |
| cpe:2.3:h:aliasrobotics:mir1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | aliasrobotics |
- cpe:2.3:o:aliasrobotics:mir100_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·aliasrobotics
- cpe:2.3:h:aliasrobotics:mir100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·aliasrobotics
- cpe:2.3:o:aliasrobotics:mir200_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·aliasrobotics
- cpe:2.3:h:aliasrobotics:mir200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·aliasrobotics
- cpe:2.3:o:aliasrobotics:mir250_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·aliasrobotics
- cpe:2.3:h:aliasrobotics:mir250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·aliasrobotics
- cpe:2.3:o:aliasrobotics:mir500_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·aliasrobotics
- cpe:2.3:h:aliasrobotics:mir500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·aliasrobotics
- cpe:2.3:o:aliasrobotics:mir1000_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·aliasrobotics
- cpe:2.3:h:aliasrobotics:mir1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·aliasrobotics
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mobile-industrial-robotics:er200_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Mobile-industrial-robotics |
| cpe:2.3:h:mobile-industrial-robotics:er200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile-industrial-robotics |
| cpe:2.3:o:enabled-robotics:er-lite_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Enabled-robotics |
| cpe:2.3:h:enabled-robotics:er-lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Enabled-robotics |
| cpe:2.3:o:enabled-robotics:er-flex_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Enabled-robotics |
| cpe:2.3:h:enabled-robotics:er-flex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Enabled-robotics |
| cpe:2.3:o:enabled-robotics:er-one_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Enabled-robotics |
| cpe:2.3:h:enabled-robotics:er-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Enabled-robotics |
| cpe:2.3:o:uvd-robots:uvd_robots_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Uvd-robots |
| cpe:2.3:h:uvd-robots:uvd_robots:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Uvd-robots |
- cpe:2.3:o:mobile-industrial-robotics:er200_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Mobile-industrial-robotics
- cpe:2.3:h:mobile-industrial-robotics:er200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile-industrial-robotics
- cpe:2.3:o:enabled-robotics:er-lite_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Enabled-robotics
- cpe:2.3:h:enabled-robotics:er-lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Enabled-robotics
- cpe:2.3:o:enabled-robotics:er-flex_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Enabled-robotics
- cpe:2.3:h:enabled-robotics:er-flex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Enabled-robotics
- cpe:2.3:o:enabled-robotics:er-one_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Enabled-robotics
- cpe:2.3:h:enabled-robotics:er-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Enabled-robotics
- cpe:2.3:o:uvd-robots:uvd_robots_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Uvd-robots
- cpe:2.3:h:uvd-robots:uvd_robots:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Uvd-robots
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-10278
- 2026-10-03 Alias added: GHSA-xwcg-44xm-88h2
References
More Mobile Industrial Robots A/S vulnerabilities
- TI-2020-08279 RVD#2554: MiR ROS computational graph presents no authentication mechanisms CVSS 3.1CRITICAL 9.8
- TI-2020-08278 Exposure of resource to wrong sphere in Mobile Industrial Robots A/S MiR100 CVSS 3.1CRITICAL 9.8
- TI-2020-08283 RVD#2558: Default credentials on SICK PLC allows disabling safety features CVSS 3.1CRITICAL 9.8
- TI-2020-08277 RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard CVSS 3.1CRITICAL 9.8
- TI-2020-08276 RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point CVSS 3.1CRITICAL 9.8
- TI-2020-08286 RVD#2569: Insecure operating system defaults in MiR robots CVSS 3.1CRITICAL 9.8
Sources
- CVE-2020-10278 · CVE Program
- CVE-2020-10278 · NVD
- FIRST EPSS
- GHSA-xwcg-44xm-88h2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences