GCVE - cpe:2.3:h:vecna:vgo:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:vecna:vgo:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Vecna (`89f60c67-30ce-57de-8ac7-43076def9969`)
Product	Vgo (`e2f4decb-d67a-5cb9-8609-afc05e00b9fd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-8866`	not_vulnerable	2026-06-08 05:12:06.609970	Details available In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection. Published: 2018-05-09T19:00:00.000Z Updated: 2024-09-16T16:33:35.624Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 http://www.securityfocus.com/bid/103966	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8860`	not_vulnerable	2026-06-08 05:12:06.590268	Details available In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network. Published: 2018-05-09T21:00:00.000Z Updated: 2024-09-17T01:30:43.321Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 http://www.securityfocus.com/bid/103966	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8858`	not_vulnerable	2026-06-08 05:12:06.586962	Details available If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to extract credentials. Published: 2018-10-30T21:00:00.000Z Updated: 2024-08-05T07:10:46.255Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17933`	not_vulnerable	2026-06-08 05:11:06.960733	Details available VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot. Published: 2018-10-30T21:00:00.000Z Updated: 2024-08-05T11:01:14.711Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17931`	not_vulnerable	2026-06-08 05:11:06.956525	Details available If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to alter scripts, which may allow code execution with root privileges. Published: 2018-10-30T21:00:00.000Z Updated: 2024-08-05T11:01:14.712Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Vecna VGo

Notes

PURL mappings

Vulnerability references

Contribute