Authentication Bypass in FrodoBots EarthRover Mini+ Firmware

Executive Summary

The vulnerability involves FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 exposing multiple local interfaces without authentication. These include an HTTP REST API on port 80 for motor control, telemetry, WiFi password retrieval, WiFi network joining, and diagnostics. Additionally, ADB on port 5555 provides root shell access, and SSH on port 22 is available.

Useful 0 Not Useful 0

Detection Guidance

Scan your network for open ports 80, 22, and 5555 using tools like nmap. Check for unexpected HTTP REST API responses on port 80 or ADB/SSH access without authentication. Example command: nmap -p 80,22,5555 <target_IP>.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated access to these interfaces allows attackers to control motors, extract sensitive data like GPS, IMEI, and WiFi passwords, join arbitrary WiFi networks, export diagnostics, and gain root access via ADB or SSH. This could lead to device hijacking, data theft, or network compromise.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability exposes unauthenticated local interfaces including HTTP REST API, ADB, and SSH, allowing unauthorized access to sensitive data like WiFi passwords, GPS/IMEI, and diagnostic exports. This could lead to data breaches violating GDPR (data protection) and HIPAA (health data privacy) by exposing personal or sensitive information without proper access controls.

Useful 0 Not Useful 0

Mitigation Strategies

Disable unauthenticated access to HTTP REST API, ADB, and SSH. Update firmware to a patched version. Block ports 80, 22, and 5555 at the firewall if not needed. Change default credentials if authentication is enabled.

Useful 0 Not Useful 0