Description
There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mobile Industrial Robots A/S | MiR100 | v2.8.1.1 and before | — |
Advisories 1
- ICSA-21-280-02 Mobile Industrial Robots Vehicles and MiR Fleet Software CISA ICS & IT advisories · Oct 7, 2021