CVE-2023-3104 MEDIUM

CVE-2023-3104: Missing Authentication for Critical Function in Unitree Robotics A1

Vendor Unitree Robotics

Product A1

Weakness CWE-306 · Missing auth

Published November 22, 2023

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

5.7/10

Attack vector Adjacent

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication.

Key dates

02Disclosure timeline

November 22, 2023 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-3104 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

CVE-2023-3104: Missing Authentication for Critical Function in Unitree Robotics A1

01Description

02Disclosure timeline

03References

04Related CVE