« Volver al listado

CVE-2025-9229

Estado: AplazadaMedia (5.3)—

Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Mobile-industrial-robots — MIR SoftwareAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-9229",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-9229",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-20T15:22:09.195431Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "1b7e193f-2525-49a1-b171-84af8827c9eb",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "1b7e193f-2525-49a1-b171-84af8827c9eb",
      "affectedData": [
        {
          "vendor": "Mobile Industrial Robots",
          "product": "MiR Robots",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "3.0.0",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Mobile Industrial Robots",
          "product": "MiR Fleet",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "3.0.0",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-08-20T09:15:29.180",
  "references": [
    {
      "url": "https://mobile-industrial-robots.com/security-advisories/information-disclosure",
      "source": "1b7e193f-2525-49a1-b171-84af8827c9eb"
    },
    {
      "url": "https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/",
      "source": "1b7e193f-2525-49a1-b171-84af8827c9eb"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "1b7e193f-2525-49a1-b171-84af8827c9eb",
      "description": [
        {
          "lang": "en",
          "value": "CWE-209"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de divulgación de información en el manejo de errores en MiR software anterior a la versión 3.0.0 permite a atacantes no autenticados ver información detallada del error, como rutas de archivos y otros datos, a través del acceso a páginas de error detalladas."
    }
  ],
  "lastModified": "2026-06-17T10:08:33.870",
  "sourceIdentifier": "1b7e193f-2525-49a1-b171-84af8827c9eb"
}