CVE-2025-9229

Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - 1b7e193f-2525-49a1-b171-84af8827c9eb

Published

2025-08-20

Last modified

2025-11-05

Weaknesses

CWE-209

Affected products

• Mir Fleet (Mobile Industrial Robots)
• Mir Robots (Mobile Industrial Robots)

References

• https://mobile-industrial-robots.com/security-advisories/information-disclosure
• https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/