Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Mobile Industrial Robots MiR Fleet, MiR Robots 3.0.0 Clear all filters
TI-2025-08461 CVE-2025-9229 · GHSA-76w7-pxx7-5v24

Information Disclosure in MiR robots and MiR fleet through verbose error pages

Priority LOW 24

Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-08-20 Fixed in 3.0.0 CWE-209
TI-2025-08460 CVE-2025-9228 · GHSA-p95m-pp4p-p9j3

Insufficient authorization when creating notes

Priority LOW 19

MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-08-20 Fixed in 3.0.0 CWE-863
TI-2025-08457 CVE-2025-9225 · GHSA-hxwp-fxc7-p9c4

Cross-site scripting (XSS) in MiR robots and MiR fleet

Priority LOW 24

Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00264 Published 2025-08-20 Fixed in 3.0.0 CWE-79