CVE-2022-2675CWE-285

Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down

published August 5, 2022

CVSS
—
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware version 0.1.35) can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00500 · 41.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-08-05T17:01Z
EPSS history
Timeline
  • 05 AUG 17:01Z
    Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down
    cvelistv5