Back to Database
Status published
Medium
CVE-2022-2675
Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down
Vulnerability Description
Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware version 0.1.35) can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2675
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Discovered and reported by security researcher Kevin Finisterre
References
More from Unitree
View All →CVE-2025-60251
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept...
Medium
5
CVE-2025-60250
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt...
Medium
4.7
CVE-2025-60017
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow...
High
8.2
CVE-2025-35027
Unitree Multiple Robotic Products Command Injection
High
7.3
CVE-2025-2894
Unitree Go1 Robot Dog Backdoor Control Channel
Medium
6.6
Affected Vendor
Unitree
View all reports →Affected Software
Go 1
Vulnerable Versions:
0.1.35
Timeline
Official Publish:
August 5th, 2022
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H