CVE-2025-45467

Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation.

Score

CVSS 3.1 7.1 High

Status

Analyzed - cve@mitre.org

Published

2025-07-25

Last modified

2025-07-25

Weaknesses

CWE-276

Affected products

• Go1 Firmware (Unitree)

References

• https://github.com/zgsnj123/CVE-2025-45467/tree/main
• https://www.unitree.com/cn/go1