Information Disclosure Vulnerability in MiR Software by Mobile Industrial Robots
CVE-2025-9229

5.3MEDIUM

Key Information:

Vendor

Mobile Industrial Robots

Status
Mir Robots
Mir Fleet
Vendor
CVE Published:
20 August 2025

What is CVE-2025-9229?

An information disclosure vulnerability exists in the error handling of MiR software versions earlier than 3.0.0. This flaw permits unauthenticated attackers to exploit verbose error pages, revealing sensitive information such as file paths and other contextual data, thereby increasing the risk of further attacks on the system.

Affected Version(s)

MiR Fleet 0 < 3.0.0

MiR Robots 0 < 3.0.0

References

https://mobile-industrial-robots.com/security-advisories/...
vendor-advisory
https://supportportal.mobile-industrial-robots.com/docume...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lockheed Martin Red Team
.