CVE-2018-17933

8.8 highEPSS 1.2%

High (8.8) in vecna vgo firmware. EPSS 1.2% chance of exploitation in the next 30 days.

VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2018-10-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vecna:vgo_firmware

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01

Check your stack JSON