{"id":"CVE-2026-121689","kind":"vulnerability","aliases":["CVE-2026-121689"],"related":[],"title":"FrodoBots EarthRover Mini+ firmware leaks Wi-Fi password and system credentials","description":"FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.","summary":"The EarthRover Mini+ robot firmware stores its Wi-Fi pre-shared key in plaintext and exposes it through unauthenticated API endpoints and diagnostic exports. Unauthenticated ADB access also lets an attacker retrieve the /etc/shadow password file.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"EarthRover Mini+ firmware","fixed":[],"affected":"v6.2.4_6.2.5_0.614.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["earthrover-mini-plus","frodobots","infrastructure","iot","robotics"],"not_affected_if":["unknown"],"how_to_check":"Unconfirmed. Per the NVD description, the affected firmware is v6.2.4_6.2.5_0.614.0. Check the firmware version on the device. Also check whether ADB is reachable without authentication on your network (adb connect <robot-ip>:5555) and whether the robot's API returns the Wi-Fi PSK without login. Neither check is confirmed by a vendor page.","fix":null,"status":"open","published_at":"2026-11-09T17:17:17+00:00","first_seen_at":"2026-11-09T17:27:38+00:00","triaged_at":"2026-11-09T17:29:03+00:00","updated_at":"2026-11-09T17:30:23+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-09T17:29:03Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"FrodoBots EarthRover Mini+ firmware leaks Wi-Fi password and system credentials","impact":"high","summary":"The EarthRover Mini+ robot firmware stores its Wi-Fi pre-shared key in plaintext and exposes it through unauthenticated API endpoints and diagnostic exports. Unauthenticated ADB access also lets an attacker retrieve the /etc/shadow password file.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["frodobots","earthrover-mini-plus","robotics","iot"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reads Wi-Fi password and system password hashes remotely","analyst_note":"Check the NVD entry and FrodoBots vendor advisory for affected firmware versions, a fixed firmware release, and whether ADB is enabled by default.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Owners and operators of the FrodoBots EarthRover Mini+ robot running firmware v6.2.4, v6.2.5 or 0.614.0 are exposed, since the flaws are in the device firmware itself. The sources do not say which network setups or ADB configurations are required beyond the default, so the exposure scope is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000729,"input_tokens":4618,"output_tokens":534,"severity_before":"unknown"},"analyst_status":"done","analyst_note":"Check the NVD entry and FrodoBots vendor advisory for affected firmware versions, a fixed firmware release, and whether ADB is enabled by default.","search":"'-121689':15A,18A '-2026':14A,17A '/etc/shadow':65B,108C 'access':58B,103C 'adb':57B,102C 'addit':100C 'allow':104C 'also':59B 'api':51B,95C 'attack':62B 'credenti':12A,75C 'cve':13A,16A 'diagnost':54B,98C 'disclos':92C 'earthrov':2A,23B,31B,69C 'earthrover':19A 'earthrover-mini-plus':22B 'endpoint':52B,96C 'export':55B,99C 'expos':47B,73C 'fi':8A,39B,82C 'file':67B,109C 'firmwar':4A,34B,71C 'firmware':21A 'frodobot':1A,26B,68C 'infrastructur':27B 'insecur':78C 'iot':28B 'key':43B 'leak':5A 'let':60B 'mechan':79C 'mini':3A,20A,24B,32B,70C 'multipl':77C 'password':9A,66B 'plaintext':45B,87C 'plus':25B 'pre':41B 'pre-shar':40B 'psk':83C 'retriev':63B,105C 'robot':29B,33B 'sensit':74C 'share':42B 'store':35B,85C 'system':11A 'unauthent':50B,56B,94C,101C 'v6.2.4_6.2.5_0.614.0':72C 'wi':7A,38B,81C 'wi-fi':6A,37B 'wpa_supplicant.conf':89C","nicknames":[],"mitigations":[],"who_affected":"Owners and operators of the FrodoBots EarthRover Mini+ running firmware v6.2.4_6.2.5_0.614.0, as listed in the NVD description. An attacker who can reach the robot's API or ADB on the network could read the Wi-Fi password and /etc/shadow. Whether ADB is on by default and whether a fixed firmware exists are unknown; no vendor page has been read.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["earthroverminifirmware","minifirmware"],"ptokens":["earthrover","firmware","mini"],"labels":["earthroverminiplus","frodobots","high","infrastructure","iot","robotics"],"campaign_type":null,"search_a":"'-121689':15A,18A '-2026':14A,17A 'credenti':12A 'cve':13A,16A 'earthrov':2A 'earthrover':19A 'fi':8A 'firmwar':4A 'firmware':21A 'frodobot':1A 'leak':5A 'mini':3A,20A 'password':9A 'system':11A 'wi':7A 'wi-fi':6A","search_b":"'/etc/shadow':65B 'access':58B 'adb':57B 'also':59B 'api':51B 'attack':62B 'diagnost':54B 'earthrov':23B,31B 'earthrover-mini-plus':22B 'endpoint':52B 'export':55B 'expos':47B 'fi':39B 'file':67B 'firmwar':34B 'frodobot':26B 'infrastructur':27B 'iot':28B 'key':43B 'let':60B 'mini':24B,32B 'password':66B 'plaintext':45B 'plus':25B 'pre':41B 'pre-shar':40B 'retriev':63B 'robot':29B,33B 'share':42B 'store':35B 'unauthent':50B,56B 'wi':38B 'wi-fi':37B","search_c":"'/etc/shadow':108C 'access':103C 'adb':102C 'addit':100C 'allow':104C 'api':95C 'credenti':75C 'diagnost':98C 'disclos':92C 'earthrov':69C 'endpoint':96C 'export':99C 'expos':73C 'fi':82C 'file':109C 'firmwar':71C 'frodobot':68C 'insecur':78C 'mechan':79C 'mini':70C 'multipl':77C 'plaintext':87C 'psk':83C 'retriev':105C 'sensit':74C 'store':85C 'unauthent':94C,101C 'v6.2.4_6.2.5_0.614.0':72C 'wi':81C 'wpa_supplicant.conf':89C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T17:17:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121689","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121689","severity":null,"published_at":"2026-11-09T17:17:17+00:00","modified_at":"2026-11-09T17:17:17+00:00","first_seen_at":"2026-11-09T17:27:38+00:00","fetched_at":"2026-11-09T17:27:38+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121689:2306","url":null,"severity":null,"published_at":"2026-11-09T17:30:23+00:00","modified_at":"2026-11-09T17:30:23+00:00","first_seen_at":"2026-11-09T17:30:23+00:00","fetched_at":"2026-11-09T17:30:23+00:00","note":"Could not reach primary sources: web-cli out of Exa credits, NVD page via WebFetch returned no content. No FrodoBots advisory read, so fix, affected range and ADB default are unknown. Nothing verified. Settle by reading the FrodoBots advisory/firmware release notes for a version after v6.2.4_6.2.5_0.614.0."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}