Issues

• RVD#3347: Data Distribution Service (DDS) Chain of Trust (CoT) violation in Open DDS

  package: sros2robot component: DDSrobot component: ROS2vulnerability
  aliasrobotics/RVD#3347 · Filter by author vmayoral opened on Feb 25, 2023

• RVD#3346: Data Distribution Service (DDS) Chain of Trust (CoT) violation in Cyclone DDS

  package: sros2robot component: DDSrobot component: ROS2vendor: ADLINKvulnerability
  aliasrobotics/RVD#3346 · Filter by author vmayoral opened on Feb 25, 2023

• RVD#3345: Data Distribution Service (DDS) Chain of Trust (CoT) violation

  components softwarepackage: sros2robot component: DDSrobot component: FastRTPSrobot component: ROS2vendor: eProsimavulnerability
  aliasrobotics/RVD#3345 · Filter by author vmayoral opened on Feb 25, 2023

• [Security] Workflow issues_management.yml is using vulnerable action actions/checkout

  aliasrobotics/RVD#3342 · Filter by author fockboi-lgtm opened on Dec 19, 2021

• [Security] Workflow push.yml is using vulnerable action actions/checkout

  aliasrobotics/RVD#3343 · Filter by author Freakston opened on Dec 19, 2021

• RVD#3337: Service DoS through arbitrary pointer dereferencing on KUKA simulator

  robot component: Visual Componentsseverity: highvendor: KUKAvendor: Visual Componentsversion: 2.0.8vulnerability
  aliasrobotics/RVD#3337 · Filter by author rvd-bot opened on Nov 6, 2020

• RVD#3336: System information disclosure without authentication on KUKA simulators

  robot component: Visual Componentsseverity: mediumvendor: KUKAvendor: Visual Componentsversion: 2.0.8vulnerability
  aliasrobotics/RVD#3336 · Filter by author rvd-bot opened on Nov 6, 2020

• RVD#3330: Use of Hard-coded Credentials in Robotemi Global Ltd Temi Firmware

  severity: criticalvendor: Robotemi Globalvulnerability
  aliasrobotics/RVD#3330 · Filter by author glerapic opened on Aug 25, 2020

• RVD#3327: No authentication required for accesing ABB IRC5 FTP server

  robot: ABB IRB140robot component: ABB IRC5 OPC Serverrobot component: Robotwarerobot component: VxWorksseverity: criticalvendor: ABBvulnerability
  aliasrobotics/RVD#3327 · Filter by author rvd-bot opened on Jul 15, 2020

• RVD#3326: Hardcoded default credentials on IRC 5 OPC Server

  robot: ABB IRB140robot component: ABB IRC5 OPC Serverrobot component: Robotwarerobot component: VxWorksseverity: criticalvendor: ABBvulnerability
  aliasrobotics/RVD#3326 · Filter by author rvd-bot opened on Jul 15, 2020

• RVD#3324: ABB IRC5 FTP daemon in VxWorks does not close the TCP connection after a number of failed login attempts

  robot: ABB IRB140robot component: ABB IRC5 OPC Serverrobot component: Robotwarerobot component: VxWorksseverity: criticalvendor: ABBvendor: WindRivervulnerability
  aliasrobotics/RVD#3324 · Filter by author rvd-bot opened on Jul 15, 2020

• RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS

  components hardwarerobot: xArm5 Literobot: xArm6robot: xArm7severity: highvendor: UFactoryvulnerability
  aliasrobotics/RVD#3323 · Filter by author rvd-bot opened on Jul 15, 2020

• RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

  components hardwarerobot: xArm5 Literobot: xArm6robot: xArm7severity: highvendor: UFactoryvulnerability
  aliasrobotics/RVD#3322 · Filter by author rvd-bot opened on Jul 15, 2020

• RVD#3321: No Authentication required to exert manual control of the robot

  components hardwarerobot: xArm5 Literobot: xArm6robot: xArm7severity: criticalvendor: UFactoryvulnerability
  aliasrobotics/RVD#3321 · Filter by author rvd-bot opened on Jul 15, 2020

• RVD#3320: XML External Entity (XXE) attacks via unspecified vectors on Mitsubishi products

  triagevendor: Mitsubishi Electricvulnerability
  aliasrobotics/RVD#3320 · Filter by author rvd-bot opened on Jul 4, 2020

• RVD#3319: Uncontrolled resource consumption vulnerability in Mitsubishi products allows denial of service (DoS) attacks

  triagevendor: Mitsubishi Electricvulnerability
  aliasrobotics/RVD#3319 · Filter by author rvd-bot opened on Jul 4, 2020

• RVD#3318: XSS-like attacks for authenticated users in ABB System 800xA Information Manager

  components softwareseverity: highvendor: ABBvulnerability
  aliasrobotics/RVD#3318 · Filter by author rvd-bot opened on Jul 4, 2020

• RVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication

  components softwarerobot component: Ardupilotrobot component: MAVLinkrobot component: PX4severity: highversion: 1.0version: 2.0vulnerability
  aliasrobotics/RVD#3317 · Filter by author vmayoral opened on Jun 30, 2020
  5

• RVD#3316: No authentication in MAVLink protocol

  components softwarerobot component: Ardupilotrobot component: MAVLinkrobot component: PX4severity: criticalversion: 1.0vulnerability
  aliasrobotics/RVD#3316 · Filter by author vmayoral opened on Jun 30, 2020
  22

• RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0

  components softwarerobot component: Ardupilotrobot component: MAVLinkrobot component: PX4severity: highversion: 1.0version: 2.0vulnerability
  aliasrobotics/RVD#3315 · Filter by author vmayoral opened on Jun 30, 2020
  4

• RVD#2573: The DBPOWER U818A WIFI quadcopter drone provides FTP access over

  robot: DBPOWER U818Aseverity: mediumvendor: DBPOWERvulnerability
  aliasrobotics/RVD#2573 · Filter by author rvd-bot opened on Jun 28, 2020
  2

• RVD#2572: Web server running on Parrot ANAFI can be crashed due to the SDK

  robot: Parrot ANAFIseverity: mediumvendor: Parrotvulnerability
  aliasrobotics/RVD#2572 · Filter by author rvd-bot opened on Jun 28, 2020

• RVD#2571: Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack

  robot: Parrot ANAFIseverity: highvendor: Parrotvulnerability
  aliasrobotics/RVD#2571 · Filter by author rvd-bot opened on Jun 28, 2020

• RVD#2569: Insecure operating system defaults in MiR robots

  robot component: Ubunturobot: ER200robot: ER-Flexrobot: ER-Literobot: ER-Onerobot: MiR100robot: MiR200robot: MiR250robot: MiR500robot: MiR1000robot: UVDseverity: highvendor: Canonicalvendor: Easy Roboticsvendor: Enabled Roboticsvendor: Mobile Industrial Robotsvendor: Robotplusvendor: UVD Robotsvulnerability
  aliasrobotics/RVD#2569 · Filter by author rvd-bot opened on Jun 24, 2020

• RVD#2568: Apache server is vulnerable to a DoS

  robot: ER200robot: ER-Flexrobot: ER-Literobot: ER-Onerobot: MiR100robot: MiR200robot: MiR250robot: MiR500robot: MiR1000robot: UVDvendor: Easy Roboticsvendor: Enabled Roboticsvendor: Mobile Industrial Robotsvendor: Robotplusvendor: UVD Robotsvulnerability
  aliasrobotics/RVD#2568 · Filter by author rvd-bot opened on Jun 24, 2020