RVD#2568: Apache server is vulnerable to a DoS
Priority LOW 35CWE-239Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-404.
Summary
The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.
Why it matters now
EPSS 0.01178 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Mobile Industrial Robots A/S | MiR100 | up to v2.8.1.1 | — | No fix listed | CNA |
- MiR100 VendorMobile Industrial Robots A/S Affected up to v2.8.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mobile-industrial-robots:mir100_firmware:*:*:*:*:*:*:*:* | up to 2.8.1.1 | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir250_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir500_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
| cpe:2.3:o:mobile-industrial-robots:mir1000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Mobile Industrial Robots A/S |
| cpe:2.3:h:mobile-industrial-robots:mir1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Mobile Industrial Robots A/S |
- cpe:2.3:o:mobile-industrial-robots:mir100_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.1.1 Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir500_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
- cpe:2.3:o:mobile-industrial-robots:mir1000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mobile Industrial Robots A/S
- cpe:2.3:h:mobile-industrial-robots:mir1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mobile Industrial Robots A/S
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:easyrobotics:er200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:easyrobotics:er-lite_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er-lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:easyrobotics:er-flex_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er-flex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:easyrobotics:er-one_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Easyrobotics |
| cpe:2.3:h:easyrobotics:er-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Easyrobotics |
| cpe:2.3:o:uvd-robots:uvd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Uvd-robots |
| cpe:2.3:h:uvd-robots:uvd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Uvd-robots |
- cpe:2.3:o:easyrobotics:er200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:easyrobotics:er-lite_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er-lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:easyrobotics:er-flex_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er-flex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:easyrobotics:er-one_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Easyrobotics
- cpe:2.3:h:easyrobotics:er-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Easyrobotics
- cpe:2.3:o:uvd-robots:uvd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Uvd-robots
- cpe:2.3:h:uvd-robots:uvd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Uvd-robots
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-10280
- 2026-10-03 Alias added: GHSA-4wc2-6jq7-xfqf
References
More Mobile Industrial Robots A/S Mir1000 Firmware vulnerabilities
- TI-2020-08283 RVD#2558: Default credentials on SICK PLC allows disabling safety features CVSS 3.1CRITICAL 9.8
- TI-2020-08282 RVD#2565: Weak token generation for the REST API. CVSS 3.1CRITICAL 9.8
- TI-2020-08281 RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps) CVSS 3.1HIGH 7.1
- TI-2020-08284 RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation CVSS 3.1MEDIUM 6.4
Sources
- CVE-2020-10280 · CVE Program
- CVE-2020-10280 · NVD
- FIRST EPSS
- GHSA-4wc2-6jq7-xfqf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences