Assign CVE-2020-10269

2020/10xxx/CVE-2020-10269.json

@@ -1,18 +1,116 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "cve@aliasrobotics.com",
+        "DATE_PUBLIC": "2020-06-24T04:59:05 +00:00",
         "ID": "CVE-2020-10269",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "STATE": "PUBLIC",
+        "TITLE": "RVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "MiR100",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "v2.8.1.1 and before"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Mobile Industrial Robots A/S"
+                }
+            ]
+        }
+    },
+    "credit": [
+        {
+            "lang": "eng",
+            "value": "Bernhard Dieber (Joanneum Research), Alias Robotics (https://aliasrobotics.com/)"
+        }
+    ],
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet vehicles comes pre-configured in WiFi Master (Access Point) mode. Credentials to such wireless Access Point default to well known and widely spread SSID (MiR_RXXXX) and passwords (omitted). This information is also available in past User Guides and manuals which the vendor distributed. We have confirmed this flaw in MiR100 and MiR200 but it might also apply to MiR250, MiR500 and MiR1000."
             }
         ]
+    },
+    "generator": {
+        "engine": "Robot Vulnerability Database (RVD)"
+    },
+    "impact": {
+        "cvss": {
+            "attackComplexity": "LOW",
+            "attackVector": "NETWORK",
+            "availabilityImpact": "HIGH",
+            "baseScore": 9.8,
+            "baseSeverity": "critical",
+            "confidentialityImpact": "LOW",
+            "integrityImpact": "NONE",
+            "privilegesRequired": "NONE",
+            "scope": "UNCHANGED",
+            "userInteraction": "NONE",
+            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+            "version": "3.0"
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-798"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+    "reference_data": [
+    {
+    "name": "https://cwe.mitre.org/data/definitions/798.html",
+    "refsource": "CONFIRM",
+    "url": "https://cwe.mitre.org/data/definitions/798.html"
     }
-}
+    ],
+    "reference_data": [
+    {
+    "name": "https://www.mobile-industrial-robots.com/media/2714/mir100-user-guide_robot-interface-20-v10.pdf",
+    "refsource": "CONFIRM",
+    "url": "https://www.mobile-industrial-robots.com/media/2714/mir100-user-guide_robot-interface-20-v10.pdf"
+    }
+    ],
+    "reference_data": [
+    {
+    "name": "http://bernharddieber.com/publication/taurer2019mirsafety",
+    "refsource": "CONFIRM",
+    "url": "http://bernharddieber.com/publication/taurer2019mirsafety"
+    }
+    ],
+    "reference_data": [
+    {
+    "name": "https://github.com/aliasrobotics/RVD/issues/2566",
+    "refsource": "CONFIRM",
+    "url": "https://github.com/aliasrobotics/RVD/issues/2566"
+    }
+    ]
+    },
+    "source": {
+        "defect": [
+            "RVD#2566"
+        ],
+        "discovery": "EXTERNAL"
+    }
+}