CVE-2025-13819CWE-601

CVE-2025-13819

Medium · published December 1, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-12-01T15:15Z
References (2)
https://mobile-industrial-robots.com/security-advisories/cve-2025-13819-open-redirect · 1b7e193f-2525-49a1-b171-84af8827c9ebhttps://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/ · 1b7e193f-2525-49a1-b171-84af8827c9eb
EPSS history
Timeline
  • 01 DEC 09:41Z
    Open redirect in web server of MiR robots and MiR fleet
    cvelistv5