# Mobile Industrial Robots A/S MiR100.

Every CVE that names Mobile Industrial Robots A/S MiR100 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [RVD#2569: Insecure operating system defaults in MiR robots](https://agentprime.io/advisories/CVE-2020-10279.md)
  `CVE-2020-10279` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: Broken access control
- [RVD#2568: Apache server is vulnerable to a DoS](https://agentprime.io/advisories/CVE-2020-10280.md)
  `CVE-2020-10280` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 8.2 High · Not analysed yet · Published 24 Jun 2020 · Tags: CWE-239
- [RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point](https://agentprime.io/advisories/CVE-2020-10269.md)
  `CVE-2020-10269` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: Hard-coded credentials
- [RVD#2565: Weak token generation for the REST API.](https://agentprime.io/advisories/CVE-2020-10275.md)
  `CVE-2020-10275` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: CWE-261
- [RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers](https://agentprime.io/advisories/CVE-2020-10273.md)
  `CVE-2020-10273` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 7.5 High · Not analysed yet · Published 24 Jun 2020 · Tags: Weak cryptography or TLS
- [RVD#2561: Unprotected BIOS allows user to boot from live OS image.](https://agentprime.io/advisories/CVE-2020-10278.md)
  `CVE-2020-10278` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 6.1 Medium · Not analysed yet · Published 24 Jun 2020 · Tags: Broken access control
- [RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation](https://agentprime.io/advisories/CVE-2020-10277.md)
  `CVE-2020-10277` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 6.4 Medium · Not analysed yet · Published 24 Jun 2020 · Tags: CWE-656
- [RVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard](https://agentprime.io/advisories/CVE-2020-10270.md)
  `CVE-2020-10270` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: Hard-coded credentials
- [RVD#2558: Default credentials on SICK PLC allows disabling safety features](https://agentprime.io/advisories/CVE-2020-10276.md)
  `CVE-2020-10276` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: Hard-coded credentials
- [RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired ones](https://agentprime.io/advisories/CVE-2020-10271.md)
  `CVE-2020-10271` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: Information disclosure
- [RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)](https://agentprime.io/advisories/CVE-2020-10274.md)
  `CVE-2020-10274` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 7.1 High · Not analysed yet · Published 24 Jun 2020 · Tags: Information disclosure
- [RVD#2554: MiR ROS computational graph presents no authentication mechanisms](https://agentprime.io/advisories/CVE-2020-10272.md)
  `CVE-2020-10272` · CVE record: Mobile Industrial Robots A/S MiR100 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2020 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mobile-industrial-robots-a-s-mir100>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mobile-industrial-robots-a-s-mir100/>. Everything for agents: <https://agentprime.io/llms.txt>.
