CVE-2025-9228
BaseFortify
Publication date: 2025-08-20
Last updated on: 2025-11-05
Assigner: Teradyne Robotics
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mobile_industrial_robots | mir_robots | * |
| mobile_industrial_robots | mir_software | * |
| mobile_industrial_robots | mir_fleet | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-863 | The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in MiR software versions prior to 3.0.0, where insufficient authorization controls allow low-privilege users to create text notes that are intended only for administrative users.
How can this vulnerability impact me? :
The vulnerability can allow low-privilege users to create notes meant only for administrators, potentially leading to unauthorized information injection or manipulation within administrative notes, which could affect the integrity of administrative communications or processes.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, upgrade MiR software to version 3.0.0 or later, as versions prior to 3.0.0 have insufficient authorization controls allowing low-privilege users to create administrative notes.