CVE-2025-8748 in MiR Robots

Résumé

par MITRE • 08/08/2025

MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: TRO
• Réserver: 08/08/2025
• Divulgation: 08/08/2025
• Modérer: accepté
• Entrée: VDB-319244
• CPE: prêt
• CWE: CWE-78 (confirmé)
• CVSS: 8.8 (CNA)
• EPSS: 0.01286
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-8748
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-8748
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-8748/