How severe is CVE-2020-10274?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.1 out of 10.

What type of vulnerability is CVE-2020-10274?

This is classified as CWE-200, which is a common weakness in software security.

CVE-2020-10274 - HIGH Severity | CVSS 7.1

Vulnerability Description

The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard (refer to CVE-2020-10270 for related flaws). This flaw in combination with CVE-2020-10273 allows any attacker connected to the robot networks (wired or wireless) to exfiltrate all stored data (e.g. indoor mapping images) and associated metadata from the robot's database.

Related Vulnerabilities

CVE-2016-0089

HIGH

CVSS:7.1(High)

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Info...

CWE-2002016

CVE-2016-0090

HIGH

CVSS:7.1(High)

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information D...

CWE-2002016

CVE-2016-10339

HIGH

CVSS:7.1(High)

In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.

CWE-2002016

CVE-2016-1360

HIGH

CVSS:7.1(High)

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging...

CWE-2002016

CVE-2016-2015

HIGH

CVSS:7.1(High)

HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors.

CWE-2002016

CVE-2016-4660

HIGH

CVSS:7.1(High)

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the...

CWE-2002016