CVE-2018-8860 - In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network

Back Back to CVE browser

MEDIUM

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network

Published May 9, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 0.65%

Description

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network.

Affected products

Vendor Ics-Cert Product VGo Robot Default
n/a
- Version
  All versions prior to 3.0.3.52164
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ics-Cert

VGo Robot

n/a

Version	Status	Constraints
All versions prior to 3.0.3.52164	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

http://www.securityfocus.com/bid/103966
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/103966		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published May 9, 2018

Updated Sep 17, 2024

Reserved Mar 20, 2018

Link CVE-2018-8860

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-8860

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-8860