CVE-2023-3104CWE-306

Missing Authentication for Critical Function in Unitree Robotics A1

Medium · published November 22, 2023

CVSS v3.1
5.7
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00549 · 45.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-11-22T11:54Z
EPSS history
Timeline
  • 22 NOV 11:54Z
    Missing Authentication for Critical Function in Unitree Robotics A1
    cvelistv5