CVE-2018-8860 describes a vulnerability in Vecna VGo Robot firmware versions prior to 3.0.3.52164, where an attacker on an adjacent network can intercept firmware updates. This medium-severity vulnerability (CVSS 6.5) requires adjacent network access and low attack complexity, potentially leading to high confidentiality impact by allowing attackers to capture sensitive firmware data. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.0.3.52164CPE matchmatch criteria | cpe:2.3:o:vecna:vgo_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.