cvelist/2018/17xxx/CVE-2018-17931.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "ics-cert@hq.dhs.gov",
      "ID" : "CVE-2018-17931",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "VGo Robot",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected."
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "n/a"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to alter scripts, which may allow code execution with root privileges."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "IMPROPER ACCESS CONTROL CWE-284"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01",
            "refsource" : "MISC",
            "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01"
         }
      ]
   }
}