Approved changes feed: RSS · Atom

cpe:2.3:h:unitree:go1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorUnitree (6a056451-a5ae-5bdc-a853-ac076f310540)
ProductGo1 (bda01fde-a6ad-5838-a811-7d5dce447d9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45467 not_vulnerable 2026-06-03 15:01:18.876485 Details available
Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation.
Published: 2025-07-25T00:00:00.000Z
Updated: 2025-07-25T20:19:40.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45466 not_vulnerable 2026-06-03 15:01:18.875946 Details available
Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext.
Published: 2025-07-25T00:00:00.000Z
Updated: 2025-07-25T15:31:59.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2894 not_vulnerable 2026-06-03 15:00:26.808578 Unitree Go1 Robot Dog Backdoor Control Channel
MEDIUM (6.6)
The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.
Published: 2025-03-28T02:51:19.768Z
Updated: 2025-04-03T14:37:08.450Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.