PT-2025-32354

CVE-2025-8749

·

Published

2025-08-08

·

Updated

2025-11-05

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mobile Industrial Robots (MiR) versions prior to 3.0.0
Description A path traversal vulnerability exists in an API endpoint within Mobile Industrial Robots (MiR) software. Authenticated users can extract files from the robot file system by submitting a crafted API request.
Recommendations Update to version 3.0.0 or later. Restrict access to the affected API endpoint. Monitor logs for suspicious activity.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2025-8749
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com