Vulnerability · Published Nov 22, 2023 · Assigned by INCIBE
CVE-2023-3103Authentication Bypass by Spoofing in Unitree Robotics A1
High 8.0
In plain English
A high-severity authentication bypass by spoofing in A1 from Unitree Robotics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)8.0High
Exploit odds (30 days)0.6%top 52.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a denial-of-service (DOS) condition.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unitree Robotics | A1 | 1.16 |
Weakness: CWE-290 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H