Skip to content
OpenAdvisories
High · 8.0 CVE-2023-3103 EUVD-2023-43790GHSA-798h-6rgp-73qq

Authentication Bypass by Spoofing in Unitree Robotics A1

Published Nov 22, 2023 · Updated Aug 2, 2024 · Assigned by INCIBE

Description

Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a denial-of-service (DOS) condition.

Affected products

VendorProductAffectedFixed
Unitree Robotics A1 1.16 —

References