RVD#2565: Weak token generation for the REST API.
CVE-2020-10275

9.8CRITICAL

Key Information:

Vendor

Mobile Industrial Robots A/s

Status
Mir100
Vendor
CVE Published:
24 June 2020

What is CVE-2020-10275?

The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD, the token string is generated directly with base64(USERNAME:sha256(PASSWORD)). An unauthorized attacker inside the network can use the default credentials to compute the token and interact with the REST API to exfiltrate, infiltrate or delete data.

Affected Version(s)

MiR100 v2.8.1.1 and before

References

https://github.com/aliasrobotics/RVD/issues/2565
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alias Robotics (group, https://aliasrobotics.com)
.