CVEvulnerability
CVE-2018-8858
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-522
Description
If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to extract credentials.
Affected configurations
• vecna vgo firmware (<= 3.0.3.52164)
• vecna vgo firmware 3.0.3.53662
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 Third Party Advisory, US Government Resource