CVE-2025-9228

Summary

MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users.

Affected Software

Weaknesses

• CWE-863: CWE-863: Incorrect Authorization

Workarounds

If you cannot immediately update to the recommended version, we recommend the following compensating measures:

1. Operate the MiR system in a segmented and secured network with strict firewall rules

2. Secure user accounts on the MiR system as recommended in the MiR Cybersecurity Guide

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://mobile-industrial-robots.com/security-advisories/insufficient-authorization-when-creating-notes
• https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/

• ←Previous
• Next→