Vulnerability Description
If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to extract credentials.
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vecna | Vgo Firmware | <= 3.0.3.52164 |
| Vecna | Vgo | - |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2018-8858?
CVE-2018-8858 is a vulnerability with a CVSS score of 9.8 (CRITICAL). If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to extract credentials.
How severe is CVE-2018-8858?
CVE-2018-8858 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-8858?
Check the references section above for vendor advisories and patch information. Affected products include: Vecna Vgo Firmware, Vecna Vgo.