CVE-2026-121690
Received Received - Intake

Privilege Escalation in FrodoBots EarthRover Mini+ Firmware

Publication date: 2026-11-09

Last updated on: 2026-11-09

Assigner: CERT/CC

Description
FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. All processes run as root and the system lacks privilege separation. The compromise of any single service results in full administrative control of the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-09
Last Modified
2026-11-09
Generated
2026-11-09
AI Q&A
2026-11-09
EPSS Evaluated
N/A
NVD
CVE-2026-121690
EUVD
EUVD-2026-120095

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
frodobots earthrover_mini 6.2.4_6.2.5_0.614.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 running all processes as root without privilege separation. This means any compromise of a single service grants full administrative control over the device.

Impact Analysis

An attacker exploiting this flaw could gain complete control of the device by compromising any service. This allows unauthorized access, data theft, or manipulation of device functions, potentially disrupting operations or causing physical damage.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control, such as GDPR and HIPAA, due to the lack of privilege separation and excessive permissions. It risks unauthorized access to sensitive data.

Mitigation Strategies

Implement privilege separation by configuring services to run with least privileges. Disable root access for non-essential processes and isolate critical services. Update firmware to a patched version if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121690. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...