CVE-2025-9229: medium-severity vulnerability in Mobile Industrial Robots MiR Robots
Information Disclosure in MiR robots and MiR fleet through verbose error pages
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.3%
Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Related CVEs — Mobile Industrial Robots MiR Robots
In the same product, most dangerous first.
CVE-2025-8748HIGHOS command injection in MiR robots and MiR fleet via crafted HTTP requestsEPSS 1.3%CVE-2025-8749MEDIUMPath traversal vulnerability in MiR robot software via API requestsEPSS 0.4%CVE-2025-9225MEDIUMCross-site scripting (XSS) in MiR robots and MiR fleetEPSS 0.3%CVE-2025-9228MEDIUMInsufficient authorization when creating notesEPSS 0.2%