Description
FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FrodoBots | FrodoBots EarthRover Mini+ firmware | 6.2.4_6.2.5_0.614.0 | — |