Vulnerability · Published Nov 22, 2023 · Assigned by INCIBE
CVE-2023-3104Missing Authentication for Critical Function in Unitree Robotics A1
Medium 5.7
In plain English
A medium-severity missing authentication in A1 from Unitree Robotics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.5%top 53.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unitree Robotics | A1 | 1.16 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N