Unitree Robotics A1 vulnerabilities

Latest Unitree Robotics A1 CVEs

Newest publication first

1. CVE-2023-3104 Missing Authentication for Critical Function in Unitree Robotics A1

   Published 2023-11-22

   High·CVSS 7.5 EPSS 0.55%

   Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication.

2. CVE-2023-3103 Authentication Bypass by Spoofing in Unitree Robotics A1

   Published 2023-11-22

   Medium·CVSS 5.9 EPSS 0.57%

   Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.