CVE-2020-10280

The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AliasCNA
8.2 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
VendorProductVersion
mobile-industrial-robotsmir100_firmware
𝑥
≤ 2.8.1.1
mobile-industrial-robotsmir200_firmware
-
mobile-industrial-robotsmir250_firmware
-
mobile-industrial-robotsmir500_firmware
-
mobile-industrial-robotsmir1000_firmware
-
easyroboticser200_firmware
-
easyroboticser-lite_firmware
-
easyroboticser-flex_firmware
-
easyroboticser-one_firmware
-
uvd-robotsuvd_firmware
-
𝑥
= Vulnerable software versions