CVE-2018-8860

EUVD-2018-20468
In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
vecnavgo_firmware
𝑥
< 3.0.3.52164
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/103966
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
http://www.securityfocus.com/bid/103966
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01