Approved changes feed: RSS · Atom

cpe:2.3:o:unitree:a1_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorUnitree (6a056451-a5ae-5bdc-a853-ac076f310540)
ProductA1 Firmware (85139ec4-de4a-50d2-8143-1f221295f173)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3104 vulnerable 2026-06-03 14:52:39.907010 Missing Authentication for Critical Function in Unitree Robotics A1
MEDIUM (5.7)
Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication.
Published: 2023-11-22T11:54:30.983Z
Updated: 2024-08-02T06:48:07.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3103 vulnerable 2026-06-03 14:52:39.906041 Authentication Bypass by Spoofing in Unitree Robotics A1
HIGH (8)
Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a denial-of-service (DOS) condition.
Published: 2023-11-22T11:51:48.573Z
Updated: 2024-08-02T06:48:07.090Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.