CVE-2025-8748highCWE-78

CVE-2025-8748: falha de alta gravidade em Mobile Industrial Robots MiR Robots

OS command injection in MiR robots and MiR fleet via crafted HTTP requests

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar MiR Robots+ Monitorar MiR Fleet

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 1.3%
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Mobile Industrial Robots · MiR FleetMobile Industrial Robots · MiR Robots
CVEs relacionadas — Mobile Industrial Robots MiR Robots

No mesmo produto, das mais perigosas para as menos.

CVE-2025-8749MEDIUMPath traversal vulnerability in MiR robot software via API requestsEPSS 0.4%CVE-2025-9229MEDIUMInformation Disclosure in MiR robots and MiR fleet through verbose error pagesEPSS 0.3%CVE-2025-9225MEDIUMCross-site scripting (XSS) in MiR robots and MiR fleetEPSS 0.3%CVE-2025-9228MEDIUMInsufficient authorization when creating notesEPSS 0.2%