Aware2
Monthly
Unauthenticated attackers on the same adjacent network or RF segment can intercept, hijack, or modify cleartext UDP control traffic to Teledyne FLIR PackBot and FirstLook robots running Aware2 (through 6.9.0.2 and 1.7.9 respectively) because the operator-control-unit-to-robot link lacks encryption and any cryptographic integrity check. The issue is rated CVSS 8.5 (AV:A/AC:L/PR:N/UI:N, with high integrity and availability impact) and requires network/radio adjacency plus timing to affect live operations; no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis. This is not an internet-reachable flaw and depends on the attacker being positioned to observe or inject the live UDP control stream.
Hardcoded credentials in Teledyne FLIR Aware2 let unauthenticated attackers within radio or network adjacency (CVSS AV:A) bypass the software's access control and read or reconfigure affected PackBot (Aware2 through 6.9.0.2) and FirstLook (Aware2 through 1.7.9) robots. Because the passwords are embedded in firmware images and reproduced in product documentation, anyone holding a unit image or manual can obtain them without bespoke exploit tooling; no authentication (PR:N) and no user interaction (UI:N) are required, and the assessed scope change (S:C) reflects full compromise of the robot platform. No public exploit code has been identified at time of analysis, but the design-level flaw (CWE-798) means the credentials themselves are the attack vector, and Mandiant's disclosure (MNDT-2026-0031) frames this as a genuine high-priority issue rather than an inflated CVSS score.
Unvalidated pathnames in the Teledyne FLIR Aware2 web interface let remote unauthenticated attackers read configuration and security parameters from PackBot robots running Aware2 through 6.9.0.2 and FirstLook robots running Aware2 through 1.7.9 via path traversal. The CVSS 4.0 vector rates this 10.0, but the independent assessment scores it CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting information disclosure only with no write or command-execution capability described. No authentication, credentials, or user interaction are required (PR:N/UI:N); there is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV, so real-world risk is governed mainly by whether the robot's management web interface is reachable from an untrusted network.
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 (all versions through 6.9.0.2) allows an unauthenticated attacker positioned on the same network segment to passively intercept and actively hijack or modify the command-and-control session traffic used to operate Teledyne FLIR PackBot robots. The CVSS 4.0 vector (AV:A/PR:N/UI:N, with high confidentiality, integrity and availability impact on both the vulnerable and subsequent systems) yields a 9.4 severity, while our independent CVSS 3.1 assessment scores it 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); the practical limiting factor is that the flaw is adjacent-network only and not internet-routable, so exploitation requires on-path positioning via a compromised control station, a tapped operational LAN, or a rogue wireless link. No public exploit code and no confirmed active exploitation have been identified at time of analysis - CISA SSVC records Exploitation: none and Automatable: no - and no vendor-released patch was identified in the available data, so the realistic threat is an operational-environment insider or a physically/wirelessly proximate attacker rather than a remote internet adversary.
Unauthenticated denial of service against Teledyne FLIR PackBot robots running the Aware2 web interface, where the reboot endpoint is exposed without any authentication control. Attackers who already hold a position on the local or adjacent network segment (CVSS AV:A) can trigger a robot reboot with no credentials (PR:N) and no user interaction (UI:N), disrupting operational availability of the platform. According to our independent assessment, this is a genuine but bounded operational-availability issue rather than a top-tier emergency: exposure is confined to field/operational networks rather than the open internet, impact is limited to denial of service with no data exposure or code execution, and no public exploit had been identified at the time of analysis (Mandiant disclosure MNDT-2026-0027; EUVD-2026-91048).
Cleartext 802.11 session traffic between Teledyne FLIR Aware2 (versions through 6.9.0.2) and PackBot robots can be sniffed, hijacked, or modified by an adjacent unauthenticated attacker who is within radio range of the robot's wireless network, giving limited confidentiality, integrity, and availability impact (assessed CVSS 3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L; CVSS 4.0 base 5.3). The flaw is CWE-319 (cleartext transmission of sensitive information) and stems from the absence of transport encryption on the robot control link rather than from a software logic error, so exploitation requires RF proximity to an operating robot on the same 802.11 network and does not need credentials or user interaction. No public exploit code or confirmed in-the-wild exploitation has been identified at time of analysis (not listed in CISA KEV), and the practical risk is bounded mainly by the mandatory adjacency requirement, which narrows realistic exposure to active fielded deployments; the issue was disclosed by Mandiant as MNDT-2026-0030 and tracked in the EU as EUVD-2026-91051.
Unauthenticated attackers on the same adjacent network or RF segment can intercept, hijack, or modify cleartext UDP control traffic to Teledyne FLIR PackBot and FirstLook robots running Aware2 (through 6.9.0.2 and 1.7.9 respectively) because the operator-control-unit-to-robot link lacks encryption and any cryptographic integrity check. The issue is rated CVSS 8.5 (AV:A/AC:L/PR:N/UI:N, with high integrity and availability impact) and requires network/radio adjacency plus timing to affect live operations; no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis. This is not an internet-reachable flaw and depends on the attacker being positioned to observe or inject the live UDP control stream.
Hardcoded credentials in Teledyne FLIR Aware2 let unauthenticated attackers within radio or network adjacency (CVSS AV:A) bypass the software's access control and read or reconfigure affected PackBot (Aware2 through 6.9.0.2) and FirstLook (Aware2 through 1.7.9) robots. Because the passwords are embedded in firmware images and reproduced in product documentation, anyone holding a unit image or manual can obtain them without bespoke exploit tooling; no authentication (PR:N) and no user interaction (UI:N) are required, and the assessed scope change (S:C) reflects full compromise of the robot platform. No public exploit code has been identified at time of analysis, but the design-level flaw (CWE-798) means the credentials themselves are the attack vector, and Mandiant's disclosure (MNDT-2026-0031) frames this as a genuine high-priority issue rather than an inflated CVSS score.
Unvalidated pathnames in the Teledyne FLIR Aware2 web interface let remote unauthenticated attackers read configuration and security parameters from PackBot robots running Aware2 through 6.9.0.2 and FirstLook robots running Aware2 through 1.7.9 via path traversal. The CVSS 4.0 vector rates this 10.0, but the independent assessment scores it CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting information disclosure only with no write or command-execution capability described. No authentication, credentials, or user interaction are required (PR:N/UI:N); there is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV, so real-world risk is governed mainly by whether the robot's management web interface is reachable from an untrusted network.
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 (all versions through 6.9.0.2) allows an unauthenticated attacker positioned on the same network segment to passively intercept and actively hijack or modify the command-and-control session traffic used to operate Teledyne FLIR PackBot robots. The CVSS 4.0 vector (AV:A/PR:N/UI:N, with high confidentiality, integrity and availability impact on both the vulnerable and subsequent systems) yields a 9.4 severity, while our independent CVSS 3.1 assessment scores it 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); the practical limiting factor is that the flaw is adjacent-network only and not internet-routable, so exploitation requires on-path positioning via a compromised control station, a tapped operational LAN, or a rogue wireless link. No public exploit code and no confirmed active exploitation have been identified at time of analysis - CISA SSVC records Exploitation: none and Automatable: no - and no vendor-released patch was identified in the available data, so the realistic threat is an operational-environment insider or a physically/wirelessly proximate attacker rather than a remote internet adversary.
Unauthenticated denial of service against Teledyne FLIR PackBot robots running the Aware2 web interface, where the reboot endpoint is exposed without any authentication control. Attackers who already hold a position on the local or adjacent network segment (CVSS AV:A) can trigger a robot reboot with no credentials (PR:N) and no user interaction (UI:N), disrupting operational availability of the platform. According to our independent assessment, this is a genuine but bounded operational-availability issue rather than a top-tier emergency: exposure is confined to field/operational networks rather than the open internet, impact is limited to denial of service with no data exposure or code execution, and no public exploit had been identified at the time of analysis (Mandiant disclosure MNDT-2026-0027; EUVD-2026-91048).
Cleartext 802.11 session traffic between Teledyne FLIR Aware2 (versions through 6.9.0.2) and PackBot robots can be sniffed, hijacked, or modified by an adjacent unauthenticated attacker who is within radio range of the robot's wireless network, giving limited confidentiality, integrity, and availability impact (assessed CVSS 3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L; CVSS 4.0 base 5.3). The flaw is CWE-319 (cleartext transmission of sensitive information) and stems from the absence of transport encryption on the robot control link rather than from a software logic error, so exploitation requires RF proximity to an operating robot on the same 802.11 network and does not need credentials or user interaction. No public exploit code or confirmed in-the-wild exploitation has been identified at time of analysis (not listed in CISA KEV), and the practical risk is bounded mainly by the mandatory adjacency requirement, which narrows realistic exposure to active fielded deployments; the issue was disclosed by Mandiant as MNDT-2026-0030 and tracked in the EU as EUVD-2026-91051.