Vulnerabilities

TI-2018-12764 CVE-2018-17933 · GHSA-fgpm-wqwm-x2mm

Improper authorization in VGo Robot

MEDIUM 40

VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01206 Published 2018-10-30 No fix listed CWE-285

TI-2018-12762 CVE-2018-17931 · GHSA-v335-f4p4-hmpj

LOW 30

If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00416 Published 2018-10-30 No fix listed CWE-284

TI-2018-06400 CVE-2018-8858 · GHSA-383q-ch4j-cvqx

MEDIUM 44

If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01193 Published 2018-10-30 No fix listed CWE-522

TI-2018-06402 CVE-2018-8860 · GHSA-4w26-4rcj-vffr

LOW 30

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00639 Published 2018-05-09 Fixed in 3.0.3.52164 CWE-200

TI-2018-06408 CVE-2018-8866 · GHSA-p6r7-2v5p-pw95

MEDIUM 42

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02123 Published 2018-05-09 Fixed in 3.0.3.52164 CWE-78