CVE-2018-17933CWE-285

VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662

published October 30, 2018

CVSS
—
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01206 · 68.1th percentile
Weakness
CWE-285 · Improper Authorization
Published
2018-10-30T21:00Z
EPSS history
Timeline
  • 30 OCT 21:00Z
    VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662
    cvelistv5