Back to Database
Status published
Medium
CVE-2020-10278
RVD#2561: Unprotected BIOS allows user to boot from live OS image.
Vulnerability Description
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10278
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Lander Usategui, Alfonso Glera (Alias Robotics)
More from Mobile Industrial Robots A/S
View All →CVE-2020-10280
RVD#2568: Apache server is vulnerable to a DoS
High
8.2
CVE-2020-10279
RVD#2569: Insecure operating system defaults in MiR robots
Critical
10
CVE-2020-10277
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
Medium
6.4
CVE-2020-10276
RVD#2558: Default credentials on SICK PLC allows disabling safety features
Critical
9.8
CVE-2020-10275
RVD#2565: Weak token generation for the REST API.
Critical
9.8
Affected Vendor
Mobile Industrial Robots A/S
View all reports →Affected Software
MiR100
Vulnerable Versions:
v2.8.1.1 and before
Timeline
Official Publish:
June 24th, 2020
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H