« Volver al listado

CVE-2025-2894

Estado: AnalizadaMedia (6.6)—

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Unitree — GO1 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-2894",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-2894",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-28T15:40:56.582769Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@takeonme.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.6,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.7
      }
    ]
  },
  "affected": [
    {
      "source": "cve@takeonme.org",
      "affectedData": [
        {
          "vendor": "Unitree",
          "product": "Go1",
          "versions": [
            {
              "status": "affected",
              "version": "2022_05_11_e0d0e617"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-03-28T03:15:18.780",
  "references": [
    {
      "url": "https://github.com/MAVProxyUser/YushuTechUnitreeGo1/blob/main/Unitree_report.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@takeonme.org"
    },
    {
      "url": "https://github.com/unitreerobotics/unitree_ros/issues/120",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "cve@takeonme.org"
    },
    {
      "url": "https://takeonme.org/cves/cve-2025-2894/",
      "tags": [
        "Exploit",
        "Mitigation",
        "Third Party Advisory"
      ],
      "source": "cve@takeonme.org"
    },
    {
      "url": "https://www.axios.com/2025/04/01/threat-spotlight-backdoor-in-chinese-robots-future-of-cybersecurity",
      "tags": [
        "Press/Media Coverage"
      ],
      "source": "cve@takeonme.org"
    },
    {
      "url": "https://x.com/d0tslash/status/1730989109332607208",
      "tags": [
        "Press/Media Coverage"
      ],
      "source": "cve@takeonme.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@takeonme.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-912"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Go1 also known as \"The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level,\" contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service."
    },
    {
      "lang": "es",
      "value": "El Go1, también conocido como \"El primer robot cuadrúpedo biónico inteligente del mundo, compañero de nivel de consumidor\", contiene una puerta trasera no documentada que puede permitir al fabricante, y a cualquier persona en posesión de la clave API correcta, tener control remoto completo sobre el dispositivo robótico afectado mediante el servicio de acceso remoto CloudSail."
    }
  ],
  "lastModified": "2026-06-17T09:07:48.727",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:unitree:go1_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A800D2C-2D63-452E-B234-DE9CA4E5C127"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:unitree:go1:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8E8C711A-D435-40B3-9399-FBA7105BE1AD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@takeonme.org"
}