Vulnerability Description
Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full control of the robot, which could cause physical damage to the robot itself or its environment.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ghostrobotics | Vision 60 Firmware | 0.27.2 |
| Ghostrobotics | Vision 60 | - |
Related Weaknesses (CWE)
References
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ghosThird Party Advisory
FAQ
What is CVE-2025-41110?
CVE-2025-41110 is a vulnerability with a CVSS score of 8.8 (HIGH). Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS...
How severe is CVE-2025-41110?
CVE-2025-41110 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-41110?
Check the references section above for vendor advisories and patch information. Affected products include: Ghostrobotics Vision 60 Firmware, Ghostrobotics Vision 60.