Skip to content
OpenAdvisories
High ICSA-18-114-01 4 CVEs

Vecna VGo Robot (Update A)

Published Apr 24, 2018 · Updated Oct 30, 2018 · Revision 2

Vendor: Vecna Technologies Product: Go Robot

Summary

Successful exploitation of these vulnerabilities could allow an attacker to capture firmware updates through network traffic, extract credentials from the firmware, record video conversations, and may allow remote code execution with root privileges.

Vulnerabilities 4

  • Unscored —
    CVE-2018-17931

    If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be a…

  • Unscored —
    CVE-2018-17933

    VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User …

  • Unscored —
    CVE-2018-8858

    If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may …

  • Unscored —
    CVE-2018-8860

    In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjac…

    ICS-CERT VGo Robot

Revision history

  1. #2

    ICSA-18-114-01 Vecna VGo Robot (Update A)

  2. #1

    ICSA-18-114-01 Vecna VGo Robot

References