CVEvulnerability
CVE-2018-17931
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-284
Description
If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to alter scripts, which may allow code execution with root privileges.
Affected configurations
• vecna vgo firmware (<= 3.0.3.52164)
• vecna vgo firmware 3.0.3.53662
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 Third Party Advisory, US Government Resource