CVE-2022-2675

MEDIUM
Published Aug 5, 20223y ago · Modified Jun 17, 20261w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Aug 5, 2022 3y ago
Last Modified Jun 17, 2026 1w ago

Description

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware version 0.1.35) can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-285

Affected Products 4

VendorProductVersionRange
unitreego_1_firmware* ≤0.1.35
unitreego_1h0.1.7any
unitreego_1_firmware* <0.1.35
unitreego_1h0.1.9any

References 3

  • fccid.io https://fccid.io/2A5PE-YUSHU001/Users-Manual/User-Manual-5810729
    ProductThird Party Advisory
  • twitter.com https://twitter.com/d0tslash/status/1555326302462394370
    Third Party Advisory
  • mybotshop.de https://www.mybotshop.de/Datasheet/Unitree_A1_User_Manual_v1.0.pdf
    ProductThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.