Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fxcp-3pwg-xxx2

Опубликовано: 22 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7
CVSS3: 8.8

Описание

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full control of the robot, which could cause physical damage to the robot itself or its environment.

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full control of the robot, which could cause physical damage to the robot itself or its environment.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-287
CWE-306

Связанные уязвимости

CVSS3: 8.8
nvd
4 месяца назад

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full control of the robot, which could cause physical damage to the robot itself or its environment.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-287
CWE-306