CVE-2025-9225: falha de média gravidade em Mobile Industrial Robots MiR Robots
Cross-site scripting (XSS) in MiR robots and MiR fleet
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.3%
Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVEs relacionadas — Mobile Industrial Robots MiR Robots
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8748HIGHOS command injection in MiR robots and MiR fleet via crafted HTTP requestsEPSS 1.3%CVE-2025-8749MEDIUMPath traversal vulnerability in MiR robot software via API requestsEPSS 0.4%CVE-2025-9229MEDIUMInformation Disclosure in MiR robots and MiR fleet through verbose error pagesEPSS 0.3%CVE-2025-9228MEDIUMInsufficient authorization when creating notesEPSS 0.2%