CVE-2025-9228mediumCWE-863

CVE-2025-9228: falha de média gravidade em Mobile Industrial Robots MiR Fleet

Insufficient authorization when creating notes

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar MiR Robots+ Monitorar MiR Fleet

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Mobile Industrial Robots · MiR FleetMobile Industrial Robots · MiR Robots
CVEs relacionadas — Mobile Industrial Robots MiR Fleet

No mesmo produto, das mais perigosas para as menos.

CVE-2025-8748HIGHOS command injection in MiR robots and MiR fleet via crafted HTTP requestsEPSS 1.3%CVE-2025-8749MEDIUMPath traversal vulnerability in MiR robot software via API requestsEPSS 0.4%CVE-2025-9229MEDIUMInformation Disclosure in MiR robots and MiR fleet through verbose error pagesEPSS 0.3%CVE-2025-9225MEDIUMCross-site scripting (XSS) in MiR robots and MiR fleetEPSS 0.3%