Teledyne FLIR Aware2 EUVD-2026-91053

Exploitation requires the attacker to be on the same adjacent network or RF segment as the robot (AV:A) and able to observe or inject the UDP control traffic between the operator control unit and a PackBot or FirstLook robot running the affected Aware2 software; the weakness is present because that control channel is transmitted in cleartext with no cryptographic integrity check, so no authentication, credentials, or user interaction are needed (PR:N/UI:N). Limiting factors: the attacker must achieve network/radio adjacency and timing to sniff or hijack live traffic, and the target must be an operational PackBot (≤6.9.0.2) or FirstLook (≤1.7.9) deployment - this is not remotely exploitable across the internet.

This is a genuine, well-grounded priority for organizations operating Teledyne FLIR PackBot or FirstLook robots, though the risk is bounded by the adjacency requirement. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:N/UI:N, score 8.5) indicates an adjacent-network, low-complexity, unauthenticated attack with no user interaction and high integrity/availability impact to both the vulnerable system (VI:H/VA:H) and subsequent systems (SI:H/SA:H) - consistent with the CWE-319 cleartext/no-integrity-check flaw in operator-to-robot UDP control traffic that permits interception, hijacking, and modification. Signals partially conflict on exploitation likelihood versus impact: there is no EPSS score, no CISA KEV listing, and no public exploit identified, so there is no evidence of active or widespread exploitation. The finding originates from Mandiant (a credible, high-rigor source), which raises confidence in its technical validity even absent a weaponized exploit. The adjacent vector (attacker must be on or near the same radio/network segment) and the niche, field-deployed nature of these robots make opportunistic mass exploitation unlikely; the realistic threat is targeted interference by an actor with proximity to the robot's RF/network link. Net: high technical severity with constrained real-world reach - not a drop-everything internet-facing emergency, but operationally serious wherever these platforms are in use.

An attacker positioned on the same wireless/network segment as a PackBot or FirstLook robot passively sniffs the unencrypted, unauthenticated UDP control traffic between the operator control unit and the robot. Because the channel lacks a cryptographic integrity check, the attacker then injects or alters control packets to hijack movement or commands, or to disrupt the operator's control of the robot. No public exploit code is identified, but the attack requires only adjacency and low skill given the absence of any authentication or integrity protection.